CVE-2020-4290

—

CVSS 3.1

5.4 medium

EPSS

<1%p50

Published

Apr 8, 2020 (Apr 8, 2020)

Modified

Jun 17, 2026

Description

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow any authenticated user to spoof the configuration owner of any other user which disclose sensitive information or allow for unauthorized access. IBM X-Force ID: 176333.

Vendors: ibm
Products: security information queue
Weakness: CWE-290
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.