CVE-2020-4913

Published: Jan 4, 2021

Modified: Sep 16, 2024

PUBLISHED

CVSS v3.0

4.4

MEDIUM

IBM Cloud Pak System 2.3 could reveal credential information in the HTTP response to a local privileged user. IBM X-Force ID: 191288.

Vendor	Product	Versions
IBM	Cloud Pak System	affected `2.3`

CVSS v3.0 Vector

CVSS:3.0/C:H/S:U/AC:L/UI:N/I:N/PR:H/AV:L/A:N/E:U/RL:O/RC:C

Confidentiality

High

Scope

Unchanged

Attack Complexity

Low

User Interaction

None

Integrity

None

Privileges Required

High

Attack Vector

Local

Availability

None

x_refsource_CONFIRM

vdb-entry

x_refsource_XF

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.