CVE-2020-4842low

CVE-2020-4842: low-severity vulnerability in IBM Security Secret Server

Published · Updated

Follow this CVE+ Monitor Security Secret Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 2.7epss 1.1%
IBM Security Secret Server 10.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 190046.
CVSS:3.0/I:N/S:U/AC:L/C:L/AV:N/PR:H/A:N/UI:N/RL:O/E:U/RC:C
Affected products
IBM · Security Secret Server
Related CVEs — IBM Security Secret Server

In the same product, most dangerous first.

CVE-2020-4341LOWCVE-2020-4341EPSS 1.4%CVE-2020-4324LOWCVE-2020-4324EPSS 1.2%CVE-2020-4841MEDIUMCVE-2020-4841EPSS 1.2%CVE-2020-4413MEDIUMCVE-2020-4413EPSS 1.2%CVE-2020-4327LOWCVE-2020-4327EPSS 1.1%CVE-2020-4342MEDIUMCVE-2020-4342EPSS 1.1%