CVE-2020-4893

IBM Emptoris Strategic Supply Management Platform (SSMP) versions 10.1.0.x, 10.1.1.x, and 10.1.3.x transmit sensitive information in HTTP GET request parameters, enabling possible information disclosure via MITM. Root cause: GET parameter handling exposes data in transit. CVSS v3.0/3.1 base score...