PT-2020-17888 · Ibm · Ibm Security Information Queue

Published 2020-04-08 · Updated 2021-07-21 · CVE-2020-4164

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Security Information Queue (ISIQ) versions 1.0.0 through 1.0.5

Description The issue could expose sensitive information from application errors, potentially allowing it to be used in further attacks against the system.

Recommendations For versions 1.0.0 through 1.0.5, update to a version that addresses this issue to prevent sensitive information exposure.

Fix

Generation of Error Message Containing Sensitive Information

Weakness Enumeration

CWE-209

Related Identifiers

CVE-2020-4164

Affected Products

Ibm Security Information Queue

References · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/174400 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-4164 · Security Note
• https://ibm.com/support/pages/node/6172605 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-4164 · Vendor Advisory