PT-2020-17978 · Ibm · Ibm Security Information Queue

Chris Shepherd + 7 · Published 2020-04-08 · Updated 2020-04-08 · CVE-2020-4291

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Security Information Queue (ISIQ) versions 1.0.0 through 1.0.5

Description The issue is related to insufficient timeout functionality in the Web UI, which could disclose sensitive information to an unauthorized user.

Recommendations For IBM Security Information Queue (ISIQ) versions 1.0.0 through 1.0.5, update to a version that includes a fix for the insufficient timeout functionality in the Web UI.

Fix

Session Fixation

Weakness Enumeration

CWE-384

Related Identifiers

CVE-2020-4291

Affected Products

Ibm Security Information Queue

References · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/176334 · Vendor Advisory
• https://ibm.com/support/pages/node/6172545 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-4291 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-4291 · Security Note