← Retour aux CVEs

CVE-2020-4319

MEDIUM

4.3

Description

IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 LTS, and 9.1 CD could allow under special circumstances, an authenticated user to obtain sensitive information due to a data leak from an error message within the pre-v7 pubsub logic. IBM X-Force ID: 177402.

Details CVE

Score CVSS v3.14.3

SeveriteMEDIUM

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisLOW

Interaction utilisateurNONE

Publie7/28/2020

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

ibm:mq_appliance

Faiblesses (CWE)

CWE-209

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/177402(psirt@us.ibm.com)

https://www.ibm.com/support/pages/node/6252777(psirt@us.ibm.com)

https://exchange.xforce.ibmcloud.com/vulnerabilities/177402(af854a3a-2127-422b-91ae-364da2661108)

https://www.ibm.com/support/pages/node/6252777(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.