PT-2020-18259 · Ibm · Ibm Infosphere Information Server

Published 2020-11-13 · Updated 2020-11-17 · CVE-2020-4886

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server version 11.7

Description The issue allows sensitive information to be stored in the browser's history, potentially accessible to users with access to the same system.

Recommendations For IBM InfoSphere Information Server version 11.7, consider clearing the browser's history regularly to minimize the risk of sensitive information exposure. As a temporary workaround, restrict access to the system to prevent unauthorized users from obtaining sensitive information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insecure Storage of Sensitive Information

Weakness Enumeration

CWE-922

Related Identifiers

CVE-2020-4886

Affected Products

Ibm Infosphere Information Server

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2020-4886 · Security Note
• https://osv.dev/vulnerability/CVE-2020-4886 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/190910 · Vendor Advisory
• https://ibm.com/support/pages/node/6366715 · Vendor Advisory
• https://t.me/cvenotify/5696 · Telegram Post
• https://t.me/cibsecurity/16294 · Telegram Post