Lucene search

K
ibmIBM260238BA2A4982077CFCDB634CF609B682ED6CB3AC305EEDC0DCCD4B2AB985D6
HistoryMar 30, 2020 - 6:15 a.m.

Security Bulletin: Potential information disclosure vulnerability in IBM Tivoli Netcool Impact (CVE-2020-4239)

2020-03-3006:15:06
www.ibm.com
10

0.001 Low

EPSS

Percentile

42.3%

Summary

There is a potential information disclosure vulnerability in IBM Tivoli Netcool Impact.

Vulnerability Details

CVEID:CVE-2020-4239
**DESCRIPTION:**IBM Tivoli Netcool Impact could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/175412 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

Affected Products and Versions

Affected Product(s) Version(s)
IBM Tivoli Netcool Impact 7.1.0 7.1.0.0~7.1.0.17

Remediation/Fixes

| VRMF| Remediation/First Fix
—|—|—
IBM Tivoli Netcool Impact 7.1.0| 7.1.0.18| IBM Tivoli Netcool Impact 7.1.0 FP18

Workarounds and Mitigations

None

CPENameOperatorVersion
tivoli netcool/impacteq7.1.0

0.001 Low

EPSS

Percentile

42.3%

Related for 260238BA2A4982077CFCDB634CF609B682ED6CB3AC305EEDC0DCCD4B2AB985D6