PublicCVE

CVE-2020-4958

HIGH7.4JSON exportCreate alert

Description

IBM Security Identity Governance and Intelligence 5.2.6 does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources. IBM X-Force ID: 192209.

CVSS breakdown

CVSS 3.0
Attack Vector
Network
Attack Complexity
High
Integrity
High
Confidentiality
High
Privileges Required
None
Scope
Unchanged
User Interaction
None
Availability
None
E
Unchanged
RC
Changed
RL
O