CVE-2020-4290 - IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow any authenticated user to spoof the configuration owner of any other user which disclose sensitive information or allow for unauthorized access

Back Back to CVE browser

MEDIUM

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow any authenticated user to spoof the configuration owner of any other user which disclose sensitive information or allow for unauthorized access

Published Apr 8, 2020

5.4

MEDIUM

CVSS 3.1

EPSS 0.67%

Description

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow any authenticated user to spoof the configuration owner of any other user which disclose sensitive information or allow for unauthorized access. IBM X-Force ID: 176333.

Affected products

Vendor IBM Product Security Information Queue Default
n/a
- Version
  1.0.0
  Status
  affected
  Constraints
  -
- Version
  1.0.1
  Status
  affected
  Constraints
  -
- Version
  1.0.2
  Status
  affected
  Constraints
  -
- Version
  1.0.3
  Status
  affected
  Constraints
  -
- Version
  1.0.4
  Status
  affected
  Constraints
  -
- Version
  1.0.5
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

Security Information Queue

n/a

Version	Status	Constraints
1.0.0	affected	-
1.0.1	affected	-
1.0.2	affected	-
1.0.3	affected	-
1.0.4	affected	-
1.0.5	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-290

Authentication Bypass by Spoofing

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25537
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/176333
vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6172599
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25537		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/176333		vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6172599		x_refsource_CONFIRMPatchVendor Advisory