Design/Logic Flaw

2020-12-1719:15:00

PRIOn knowledge base

www.prio-n.com

3.3 Low

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

33.0%

JSON

IBM Security Key Lifecycle Manager 3.0.1 and 4.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 190290.

CPENameOperatorVersion
security_key_lifecycle_managerge3.0.1
security_key_lifecycle_managerlt3.0.1.5
security_key_lifecycle_managerge4.0
security_key_lifecycle_managerlt4.0.0.2

Name	Operator	Version
security_key_lifecycle_manager	ge	3.0.1
security_key_lifecycle_manager	lt	3.0.1.5
security_key_lifecycle_manager	ge	4.0
security_key_lifecycle_manager	lt	4.0.0.2