VG
Product
Verify Gateway
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 4Low 1
Watch
Add Verify Gateway to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-4385 | 9.8 | Jul 22 | IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound… Affected: 1.0.0; 1.0.1 |
| CVE-2020-4372 | 7.8 | Jul 22 | IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 stores user credentials in plain in clear text which can be read by a local user Affected: 1.0.0; 1.0.1 |
| CVE-2020-4400 | 7.5 | Jul 22 | IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials Affected: 1.0.0; 1.0.1 |
| CVE-2020-4399 | 6.5 | Jul 22 | IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could allow an authenticated user to send malformed requests to cause a denial of service against the server Affected: 1.0.0; 1.0.1 |
| CVE-2020-4397 | 5.9 | Jul 22 | IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 transmits sensitive information in plain text which could be obtained by an attacker using man in the middle techniques Affected: 1.0.0; 1.0.1 |
| CVE-2020-4369 | 5.5 | Jul 22 | IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 stores highly sensitive information in cleartext that could be obtained by a user Affected: 1.0.0; 1.0.1 |
| CVE-2020-4405 | 4.3 | Jul 27 | IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could disclose potentially sensitive information to an authenticated user due to world readable log files Affected: 1.0.0; 1.0.1 |
| CVE-2020-4371 | 3.3 | Jul 22 | IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains sensitive information in leftover debug code that could be used aid a local user in further attacks against the system Affected: 1.0.0; 1.0.1 |
Showing 8