CVE-2020-4282 Security feature bypass in Security Information Queue
Authenticated users can bypass character restrictions to perform unauthorized actions in IBM Security Information Queue.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2020-4282?
CVE-2020-4282 is a low-severity vulnerability in IBM Security Information Queue, published on 8 Apr 2020. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow an authenticated user to perform unauthorized actions by bypassing illegal character restrictions. X-Force ID: 176205.
Weakness: CWE-116
Which versions are affected by CVE-2020-4282?
It affects 1 product.
Products include Ibm Security Information Queue.
How do I fix CVE-2020-4282?
No fix has been published for CVE-2020-4282 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-4282 being exploited?
There is no known exploitation of CVE-2020-4282 in the wild and no public exploit code.
Other vulnerabilities in IBM Security Information Queue
- CVE-2020-4283 Hardcoded credentials in Security Information Queue
- CVE-2019-4217 Cross-site scripting in Security Information Queue
- CVE-2019-4162 Security feature bypass in Security Information Queue
- CVE-2020-4284 Information disclosure in Security Information Queue
- CVE-2020-4289 Information disclosure in Security Information Queue
Sources
Also known as GHSA-6v82-qq9q-vcc9.