ID CVE-2020-4604
Summary IBM Security Guardium Insights 2.0.2 stores user credentials in plain in clear text which can be read by a local privileged user. IBM X-Force ID: 184861.
References
Vulnerable Configurations
  • cpe:2.3:a:ibm:security_guardium_insights:2.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:security_guardium_insights:2.0.2:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
    cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
CVSS
Base: 2.1 (as of 15-01-2021 - 18:21)
Impact:
Exploitability:
CWE CWE-312
CAPEC
  • Retrieve Embedded Sensitive Data
    An attacker examines a target system to find sensitive data that has been embedded within it. This information can reveal confidential contents, such as account numbers or individual keys/credentials that can be used as an intermediate step in a larger attack.
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:L/AC:L/Au:N/C:P/I:N/A:N
Last major update 15-01-2021 - 18:21
Published 13-01-2021 - 19:15
Last modified 15-01-2021 - 18:21
Back to Top