CVE-2020-4635

Published: Mar 19, 2021

Modified: Sep 17, 2024

PUBLISHED

CVSS v3.0

3.7

LOW

IBM Resilient SOAR 40 and earlier could disclose sensitive information by allowing a user to enumerate usernames.

Vendor	Product	Versions
IBM	Resilient	affected `SOAR 40`

CVSS v3.0 Vector

CVSS:3.0/AV:N/S:U/PR:N/I:N/UI:N/A:N/C:L/AC:H/RL:O/E:U/RC:C

Attack Vector

Network

Scope

Unchanged

Privileges Required

None

Integrity

None

User Interaction

None

Availability

None

Confidentiality

Low

Attack Complexity

High

x_refsource_CONFIRM

vdb-entry

x_refsource_XF

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.