PT-2020-17973 · Ibm · Ibm Security Information Queue

Published 2020-04-08 · Updated 2021-07-21 · CVE-2020-4284

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Security Information Queue (ISIQ) versions 1.0.0 through 1.0.5

Description The issue is related to insufficient timeout functionality in the Web UI, which could disclose sensitive information to an unauthorized user.

Recommendations For IBM Security Information Queue (ISIQ) versions 1.0.0 through 1.0.5, consider implementing additional security measures to restrict access to sensitive information until a fix is available.

Fix

Insufficient Session Expiration

Weakness Enumeration

CWE-613

Related Identifiers

CVE-2020-4284

Affected Products

Ibm Security Information Queue

References · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/176207 · Vendor Advisory
• https://ibm.com/support/pages/node/6172551 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-4284 · Security Note
• https://osv.dev/vulnerability/CVE-2020-4284 · Vendor Advisory