CVE-2020-4996
First published: Tue Dec 22 2020(Updated: )
IBM Security Access Manager could allow a local user to obtain sensitive information via the capturing of screenshots of authentication credentials.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Security Identity Governance and Intelligence | <=5.2.6 | |
| IBM Security Identity Governance and Intelligence | =5.2.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2020-4996.
How does this vulnerability impact IBM Security Identity Governance and Intelligence?
This vulnerability allows a local user to obtain sensitive information through the capturing of screenshots of authentication credentials in IBM Security Identity Governance and Intelligence 5.2.6.
What is the severity level of CVE-2020-4996?
The severity level of CVE-2020-4996 is medium, with a CVSS score of 6.5.
What can an attacker do with the captured screenshots of authentication credentials?
An attacker can obtain sensitive information, such as authentication credentials, by capturing screenshots of authentication credentials.
Is there a fix available for CVE-2020-4996?
Yes, IBM has provided a fix for this vulnerability. Please refer to the IBM Support page for more information on the fix.
- collector/nvd-index
- agent/references
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/remedy
- agent/author
- agent/severity
- agent/tags
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/trending
- vendor/ibm
- canonical/ibm security identity governance and intelligence
- version/ibm security identity governance and intelligence/5.2.6