CVE-2019-4706

Katalog CVE

CVSS 2.7 · Low EPSS 0,80%

Kerentanan Insertion of Sensitive Information into Log File pada ibm security identity manager virtual appliance. Skor CVSS 3.1 2.7 (Low) menurut NVD.

Deskripsi (NVD)

IBM Security Identity Manager Virtual Appliance 7.0.2 writes information to log files which can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information. IBM X-Force ID: 172016.

Rincian

Terbit di NVD

1 Juli 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

2.7 (Low), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-532: Insertion of Sensitive Information into Log File

EPSS (30 hari)

0,80% peluang dieksploitasi; lebih tinggi dari 55,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://exchange.xforce.ibmcloud.com/vulnerabilities/172016 vdb entry · advisory vendor
• https://www.ibm.com/support/pages/node/6242348 patch · advisory vendor