CVE-2020-4674

CVE-2020-4674 affects IBM Workload Automation 9.5.x, where the server path is exposed in URLs, potentially aiding information disclosure and subsequent attacks. The root cause is path disclosure in the application. Remediation: IBM states APAR IJ30009 to address CVE-2020-4674; the fix is included...

Security Bulletin: Server path disclosure pattern is present in IBM Workload Scheduler

Summary Server path disclosure pattern is present in IBM Dynamic Workload Console 9.5 Vulnerability Details CVEID: CVE-2020-4674 DESCRIPTION: IBM Workload Automation stores sensitive information in URLs that could aid in further attacks against the system. CVSS Base score: 4.3 CVSS Temporal Score...