PT-2020-17979 · Ibm · Ibm Security Information Queue

Chris Shepherd + 7 · Published 2020-03-02 · Updated 2021-07-21 · CVE-2020-4292

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Security Information Queue (ISIQ) versions 1.0.0 through 1.0.4

Description The issue concerns a cross-domain policy file that includes untrusted domains, potentially leading to the disclosure of sensitive information.

Recommendations For IBM Security Information Queue (ISIQ) versions 1.0.0 through 1.0.4, consider restricting access to the cross-domain policy file to minimize the risk of sensitive information disclosure until a fix is available.

Fix

Related Identifiers

CVE-2020-4292

Affected Products

Ibm Security Information Queue

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-4292 · Security Note
• https://osv.dev/vulnerability/CVE-2020-4292 · Vendor Advisory
• https://ibm.com/support/pages/node/5390193 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/176335 · Vendor Advisory