Skip to main content

Security Secret Server CVE-2020-4842

MEDIUM
Error Message Information Leak (CWE-209)
2020-12-21 psirt@us.ibm.com
IBM Information Disclosure Security Secret Server
4.9
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
4.9 MEDIUM
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Dec 21, 2020 - 18:15 nvd
MEDIUM 4.9

DescriptionNVD

IBM Security Secret Server 10.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 190046.

AnalysisAI

IBM Security Secret Server 10.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-209. IBM Security Secret Server 10.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 190046. Affected products include: Ibm Security Secret Server.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Security Secret Server

View all
CVE-2020-4459 CRITICAL
9.8 Aug 04

IBM Security Verify Access 10.7 contains hard-coded credentials, such as a password or cryptographic key, which it uses

CVE-2020-4840 MEDIUM
6.1 Dec 21

IBM Security Secret Server 10.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack
CVE-2020-4323 MEDIUM
6.1 Jun 24

IBM Security Secret Server 10.7 is vulnerable to cross-site scripting. Rated medium severity (CVSS 6.1), this vulnerabil
CVE-2020-4841 MEDIUM
5.9 Dec 21

IBM Security Secret Server 10.6 could allow a remote attacker to obtain sensitive information, caused by the failure to

CVE-2020-4413 MEDIUM
5.9 Jun 24

IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information, caused by the failure to

CVE-2021-20582 MEDIUM
5.3 Sep 14

IBM Security Secret Server up to 11.0 stores sensitive information in URL parameters. Rated medium severity (CVSS 5.3),

CVE-2021-20569 MEDIUM
5.3 Sep 14

IBM Security Secret Server up to 11.0 could allow an attacker to enumerate usernames due to improper input validation. R
CVE-2020-4342 MEDIUM
5.3 Jun 24

IBM Security Secret Server 10.7 could disclose sensitive information included in installation files to an unauthorized u
CVE-2020-4341 MEDIUM
5.3 Jun 24

IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed technical

CVE-2020-4327 MEDIUM
5.3 Jun 24

IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed technical

CVE-2021-20508 MEDIUM
4.3 Sep 14

IBM Security Secret Server up to 11.0 could allow a remote attacker to obtain sensitive information when a detailed tech
CVE-2020-4843 MEDIUM
4.3 Dec 21

IBM Security Secret Server 10.6 stores potentially sensitive information in config files that could be read by an authen

Same weakness CWE-209 – Error Message Information Leak

View all
CVE-2025-47813 MEDIUM POC
4.3
CVE-2017-7551 CRITICAL POC
9.8
CVE-2026-48039 CRITICAL POC
9.1
CVE-2022-31140 CRITICAL POC
9.1
CVE-2024-23689 HIGH POC
8.8
CVE-2018-17961 HIGH POC
8.6
CVE-2023-37306 HIGH POC
7.5
CVE-2026-29146 HIGH POC
7.5

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2020-4842 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy