{ "impact" : { "cvssv3" : { "BM" : { "AV" : "N", "S" : "U", "PR" : "N", "SCORE" : "3.700", "I" : "N", "UI" : "N", "A" : "N", "C" : "L", "AC" : "H" }, "TM" : { "RL" : "O", "E" : "U", "RC" : "C" } } }, "data_type" : "CVE", "references" : { "reference_data" : [ { "url" : "https://www.ibm.com/support/pages/node/6431265", "title" : "IBM Security Bulletin 6431265 (Resilient OnPrem)", "name" : "https://www.ibm.com/support/pages/node/6431265", "refsource" : "CONFIRM" }, { "title" : "X-Force Vulnerability Report", "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/185502", "refsource" : "XF", "name" : "ibm-resilient-cve20204635-info-disc (185502)" } ] }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "value" : "Obtain Information", "lang" : "eng" } ] } ] }, "data_format" : "MITRE", "description" : { "description_data" : [ { "value" : "IBM Resilient SOAR 40 and earlier could disclose sensitive information by allowing a user to enumerate usernames.", "lang" : "eng" } ] }, "affects" : { "vendor" : { "vendor_data" : [ { "product" : { "product_data" : [ { "version" : { "version_data" : [ { "version_value" : "SOAR 40" } ] }, "product_name" : "Resilient" } ] }, "vendor_name" : "IBM" } ] } }, "data_version" : "4.0", "CVE_data_meta" : { "ASSIGNER" : "psirt@us.ibm.com", "ID" : "CVE-2020-4635", "DATE_PUBLIC" : "2021-03-17T00:00:00", "STATE" : "PUBLIC" } }