Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Vendor: IBM Component: Verify Gateway Clear all filters
TI-2020-03780 CVE-2020-4405 · GHSA-57qf-p627-66hm

Sensitive information in log files in IBM Verify Gateway

Priority LOW 22

IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could disclose potentially sensitive information to an authenticated user due to world readable log files.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00922 Published 2020-07-27 No fix listed CWE-532
TI-2020-03779 CVE-2020-4400 · GHSA-9v3j-42rv-3cwm

Missing brute-force protection in IBM Verify Gateway

Priority LOW 36

IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01631 Published 2020-07-22 No fix listed CWE-307
TI-2020-03777 CVE-2020-4397 · GHSA-3mgr-6m8w-82f4

Cleartext transmission of sensitive information in IBM Verify Gateway

Priority LOW 27

IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 transmits sensitive information in plain text which could be obtained by an attacker using man in the middle techniques.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00646 Published 2020-07-22 No fix listed CWE-319
TI-2020-03771 CVE-2020-4385 · GHSA-5w2j-m7jf-c94r

Hard-coded credentials in IBM Verify Gateway

Priority MEDIUM 45

IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encry…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01248 Published 2020-07-22 No fix listed CWE-798
TI-2020-03760 CVE-2020-4372 · GHSA-2f3r-62xx-976q

Insufficiently protected credentials in IBM Verify Gateway

Priority LOW 34

IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 stores user credentials in plain in clear text which can be read by a local user.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00287 Published 2020-07-22 No fix listed CWE-522
TI-2020-03759 CVE-2020-4371 · GHSA-fhfv-jf9p-qv4g

Insecure storage of sensitive information in IBM Verify Gateway

Priority LOW 16

IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains sensitive information in leftover debug code that could be used aid a local user in further attacks against the system.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00307 Published 2020-07-22 No fix listed CWE-922