CVE-2020-4604 - IBM Security Guardium Insights 2.0.2 stores user credentials in plain in clear text which can be rea

CVE-2020-4604

Summary

IBM Security Guardium Insights 2.0.2 stores user credentials in plain in clear text which can be read by a local privileged user. IBM X-Force ID: 184861.

References

Vulnerable Configurations

cpe:2.3:a:ibm:security_guardium_insights:2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_guardium_insights:2.0.2:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

CVSS

Base:	2.1 (as of 15-01-2021 - 18:21)
Impact:
Exploitability:

CWE

CWE-312

CAPEC

Retrieve Embedded Sensitive Data
An attacker examines a target system to find sensitive data that has been embedded within it. This information can reveal confidential contents, such as account numbers or individual keys/credentials that can be used as an intermediate step in a larger attack.

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:L/AC:L/Au:N/C:P/I:N/A:N

refmap via4

confirm	https://www.ibm.com/support/pages/node/6403463
xf	ibm-guardium-cve20204604-info-disc (184881)

Last major update

15-01-2021 - 18:21

Published

13-01-2021 - 19:15

Last modified

15-01-2021 - 18:21