CVE-2020-4371 - IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains sensitive information in leftover debug code that could be used aid a local user in further attacks against the system

Back Back to CVE browser

LOW

IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains sensitive information in leftover debug code that could be used aid a local user in further attacks against the system

Published Jul 22, 2020

3.3

LOW

CVSS 3.1

EPSS 0.31%

Description

IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains sensitive information in leftover debug code that could be used aid a local user in further attacks against the system. IBM X-Force ID: 179008.

Affected products

Vendor IBM Product Verify Gateway (IVG) Default
n/a
- Version
  1.0.0
  Status
  affected
  Constraints
  -
- Version
  1.0.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

Verify Gateway (IVG)

n/a

Version	Status	Constraints
1.0.0	affected	-
1.0.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-922

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25618
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/179008
vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6251287
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25618		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/179008		vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6251287		x_refsource_CONFIRMPatchVendor Advisory