PublicCVE

CVE-2020-4528

MEDIUM5.9JSON exportCreate alert

Description

IBM MQ Appliance (IBM DataPower Gateway 10.0.0.0 and 2018.4.1.0 through 2018.4.1.12) could allow a local user, under special conditions, to obtain highly sensitive information from log files. IBM X-Force ID: 182658.

CVSS breakdown

CVSS 3.0
Privileges Required
None
User Interaction
None
Availability
None
Integrity
None
Scope
Changed
Confidentiality
High
Attack Vector
Local
Attack Complexity
High
RL
O
RC
Changed
E
Unchanged

Affected products