Vulnerability · Published Feb 3, 2020 · Assigned by ibm

CVE-2020-4224

Low 2.9

In plain English

A low-severity security flaw in StoredIQ from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).

Severity (CVSS 3.0)2.9Low

Exploit odds (30 days)0.2%top 90.8% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

IBM StoredIQ 7.6.0.17 through 7.6.0.20 could disclose sensitive information to a local user due to data in certain directories not being encrypted when it contained symbolic links. IBM X-Force ID: 175133.

Affected products (as reported)

Vendor	Product	Versions
IBM	StoredIQ	7.6.0.177.6.0.20

References

https://www.ibm.com/support/pages/node/1288150 x_refsource_CONFIRM
ibm-storediq-cve20204224-info-disc (175133) vdb-entry, x_refsource_XF