CVE-2020-4408 Information disclosure in Qradar Advisor
A physical attacker can obtain unmasked passwords from the IBM QRadar Advisor interface due to inadequate masking during input.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-4408?
CVE-2020-4408 is a medium-severity vulnerability in IBM Qradar Advisor, published on 27 Jul 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The IBM QRadar Advisor 1.1 through 2.5.2 with Watson App for IBM QRadar SIEM does not adequately mask all passwords during input, which could be obtained by a physical attacker nearby. IBM X-Force ID: 179536.
Weakness: CWE-522
Which versions are affected by CVE-2020-4408?
It affects 1 product.
Products include Ibm Qradar Advisory.
How do I fix CVE-2020-4408?
No fix has been published for CVE-2020-4408 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-4408 being exploited?
There is no known exploitation of CVE-2020-4408 in the wild and no public exploit code.
Sources
Also known as GHSA-4xhv-7g8c-27wc.