CVE Feed

    Dashboard / CVE / CVE-2020-4152

    CVE-2020-4152

    IBM QRadar Network Security 5.4.0 and 5.5.0 transmits sensitive or security-critical data in cleartext in a communication channel that can be obtained using man in the middle techniques. IBM X-Force ID: 17467.

    Published:Nov 8, 2021
    Last Modified:Nov 21, 2024
    EPS:Nov 8, 2021
    EPSS Score:0.00095
    CVSS Score:5.9

    Affected Products

    Vendor
    Ibm
    Product
    Qradar Network Security

    Exploits

    No exploit reference

    Related CVEs

    CVE-2020-4159 (CVSS 7.5) — IBM QRadar Network Security 5.4.0 and 5.5.0 discloses sensitive information to unauthorized users which could …
    CVE-2020-4157 (CVSS 7.5) — IBM QRadar Network Security 5.4.0 and 5.5.0 contains hard-coded credentials, such as a password or cryptograph…
    CVE-2020-4160 (CVSS 5.9) — IBM QRadar Network Security 5.4.0 and 5.5.0 could allow a remote attacker to obtain sensitive information, cau…
    CVE-2020-4153 (CVSS 5.4) — IBM QRadar Network Security 5.4.0 and 5.5.0 is vulnerable to cross-site scripting. This vulnerability allows u…
    CVE-2017-1457 (CVSS 6.1) — IBM QRadar Network Security 5.4 is vulnerable to cross-site scripting. This vulnerability allows users to embe…
    CVE-2017-1491 (CVSS 7.5) — IBM QRadar Network Security 5.4 supports interaction between multiple actors and allows those actors to negoti…
    CVE-2017-1458 (CVSS 8.1) — IBM QRadar Network Security 5.4 is vulnerable to a XML External Entity Injection (XXE) attack when processing …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High