CVE-2020-4292

MEDIUM

IBM Security Information Queue <1.0.5 - Info Disclosure

Title source: llm

Description

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 uses a cross-domain policy file that includes domains that should not be trusted which could disclose sensitive information. IBM X-Force ID: 176335.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

https://www.ibm.com/support/pages/node/5390193

VDB Entry, Vendor Advisory vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/176335

Scores

CVSS v3 5.3

EPSS 0.0098

EPSS Percentile 58.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

Status published

Products (5)

ibm/security_information_queue 1.0.0

ibm/security_information_queue 1.0.1

ibm/security_information_queue 1.0.2

ibm/security_information_queue 1.0.3

ibm/security_information_queue 1.0.4

Published Mar 02, 2020

Tracked Since Feb 18, 2026