CVE-2020-4815
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3epss 1.3%
exploitation probability
1.3%top 31% of all CVEs
observed exploitation
nono source reports it
IBM Cloud Pak for Security (CP4S) 1.4.0.0 could allow a remote user to obtain sensitive information from HTTP response headers that could be used in further attacks against the system.
CVSS:3.0/PR:N/C:L/AV:N/I:N/AC:L/UI:N/A:N/S:U/RL:O/E:U/RC:C
Affected products
IBM · Cloud Pak for Security