CVE-2020-4369 - IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 stores highly sensitive information in cleartext that could be obtained by a user

MEDIUM

IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 stores highly sensitive information in cleartext that could be obtained by a user

Published Jul 22, 2020

5.5

MEDIUM

CVSS 3.1

EPSS 0.21%

IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 stores highly sensitive information in cleartext that could be obtained by a user. IBM X-Force ID: 179004.

Vendor IBM Product Verify Gateway (IVG) Default
unknown
Affected
- 1.0.0
- 1.0.1

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
IBM	Verify Gateway (IVG)	unknown	Affected 1.0.0 1.0.1

No remediation recorded yet.

Weaknesses (1)

CWE-312

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25616		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/179004		vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6251285		x_refsource_CONFIRMPatchVendor Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ibm

Published Jul 22, 2020

Updated Sep 16, 2024

Reserved Dec 30, 2019

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner ibm

Published Jul 22, 2020

Updated Sep 16, 2024

GitHub

No data