Description

IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further attacks against the system. IBM X-Force ID: 186947.

Remediation

References

CVE-2020-4699

Related Vulnerabilities

YUI Library Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5883)

Joomla Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2022-23794)

Atlassian Confluence Missing Authorization Vulnerability (CVE-2021-26085)

WordPress Plugin Form Maker by 10Web-Mobile-Friendly Drag & Drop Contact Form Builder Cross-Site Scripting (1.11.1)

MySQL CVE-2016-0665 Vulnerability (CVE-2016-0665)

Severity

Medium

Classification

CVE-2020-4699 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities