CVE-2020-4791 MEDIUM

CVE-2020-4791

Vendor Ibm
Product Security Identity Governance and Intelligence
Published February 9, 2021
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

6.9/10
Attack vector Adjacent
Attack complexity High
Privileges required None
User interaction None
Confidentiality High
Integrity Low

CVSS vector

CVSS:3.0/C:H/PR:N/I:L/S:C/A:N/UI:N/AV:A/AC:H/RC:C/RL:O/E:U

What the vulnerability does

01Description

IBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to obtain sensitive information using main in the middle attacks due to improper certificate validation. IBM X-Force ID: 189379.

Key dates

02Disclosure timeline

February 9, 2021 CVE published
September 16, 2024 Record updated