CVE-2020-4197 Information disclosure in Tivoli Netcool/OMNIbus

Low 2.4 Published 3 Mar 2020 Updated 16 Sep 2024

Local attackers can read cached web pages from IBM Tivoli Netcool/OMNIbus_GUI, potentially exposing sensitive information.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2020-4197?

CVE-2020-4197 is a low-severity vulnerability in IBM Tivoli Netcool/OMNIbus, published on 3 Mar 2020. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 174908.

Weakness: CWE-922

Which versions are affected by CVE-2020-4197?

It affects 1 product.

Products include Ibm Tivoli Netcool\/Omnibus.

How do I fix CVE-2020-4197?

No fix has been published for CVE-2020-4197 yet. Limit exposure of the affected software until one is available.

Is CVE-2020-4197 being exploited?

There is no known exploitation of CVE-2020-4197 in the wild and no public exploit code.

Sources

Also known as GHSA-fqgj-5pph-hqh3.