Description

IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further attacks against the system. IBM X-Force ID: 186947.

Remediation

References

CVE-2020-4699

Related Vulnerabilities

WordPress Plugin Download Plugin Security Bypass (1.6.0)

Oracle JRE CVE-2018-2618 Vulnerability (CVE-2018-2618)

WordPress Plugin Tera Charts Cross-Site Scripting (1.0)

Craft CMS Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-9757)

WordPress 5.7.x Multiple Vulnerabilities (5.7 - 5.7.8)

Severity

Medium

Classification

CVE-2020-4699 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update Known Vulnerabilities