PT-2020-17968 · Ibm · Ibm Tririga Application Platform

Published 2020-04-17 · Updated 2021-07-21 · CVE-2020-4277

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 3.5.3 through 3.6.1

Description The issue discloses sensitive information in error messages, which could aid an attacker in formulating future attacks.

Recommendations For versions 3.5.3 and 3.6.1, update to a version that does not disclose sensitive information in error messages to prevent aiding potential attackers.

Fix

Generation of Error Message Containing Sensitive Information

Weakness Enumeration

CWE-209

Related Identifiers

CVE-2020-4277

Affected Products

Ibm Tririga Application Platform

References · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/175993 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-4277 · Security Note
• https://osv.dev/vulnerability/CVE-2020-4277 · Vendor Advisory
• https://ibm.com/support/pages/node/6193467 · Vendor Advisory