CVE-2020-4175

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

IBM Security Guardium Insights 2.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 174684.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published
Aug 27, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-41779.8IBM Security Guardium 11.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound autheCVE-2020-41808.8IBM Security Guardium 11.1 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-cCVE-2020-41826.1IBM Security Guardium 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the CVE-2020-41836.1IBM Security Guardium 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the CVE-2020-41847.3IBM Security Guardium 11.2 performs an operation at a privilege level that is higher than the minimum level required, which creates new weakCVE-2020-41857.5IBM Security Guardium 10.5, 10.6, and 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highlyCVE-2020-41865.3IBM Security Guardium 10.5, 10.6, and 11.1 could disclose sensitive information on the login page that could aid in further attacks against CVE-2020-41875.3IBM Security Guardium 11.1 could disclose sensitive information on the login page that could aid in further attacks against the system. IBM CVE-2020-41885.3IBM Security Guardium 10.6 and 11.1 may use insufficiently random numbers or values in a security context that depends on unpredictable numbCVE-2020-41894.3IBM Security Guardium 11.2 discloses sensitive information in the response headers that could be used in further attacks against the system.CVE-2020-41906.7IBM Security Guardium 10.6, 11.0, and 11.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its oCVE-2020-41914.4IBM Security Guardium 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive infor
CVE-2020-4175: Medium severity, CVSS 5.9 | Vulnix