Vulnerabilities > IBM > Security Identity Governance AND Intelligence > Low

DATE CVE VULNERABILITY TITLE RISK
2021-02-09 CVE-2020-4790 Improper Input Validation vulnerability in IBM Security Identity Governance and Intelligence 5.2.6
IBM Security Identity Governance and Intelligence 5.2.6 could allow a user to cause a denial of service due to improperly validating a supplied URL, rendering the application unusuable.
low complexity
ibm CWE-20
3.3
2021-02-09 CVE-2020-4791 Information Exposure vulnerability in IBM Security Identity Governance and Intelligence 5.2.6
IBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to obtain sensitive information using main in the middle attacks due to improper certificate validation.
high complexity
ibm CWE-200
1.8
2021-02-09 CVE-2020-4996 Unspecified vulnerability in IBM Security Identity Governance and Intelligence 5.2.6
IBM Security Identity Governance and Intelligence 5.2.6 could allow a local user to obtain sensitive information via the capturing of screenshots of authentication credentials.
local
low complexity
ibm
2.1
2021-01-21 CVE-2020-4968 Use of a Broken or Risky Cryptographic Algorithm vulnerability in IBM Security Identity Governance and Intelligence 5.2.6
IBM Security Identity Governance and Intelligence 5.2.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
low complexity
ibm CWE-327
3.3