cvelist/2020/4xxx/CVE-2020-4908.json

{
   "CVE_data_meta" : {
      "STATE" : "PUBLIC",
      "ID" : "CVE-2020-4908",
      "DATE_PUBLIC" : "2020-12-15T00:00:00",
      "ASSIGNER" : "psirt@us.ibm.com"
   },
   "data_version" : "4.0",
   "problemtype" : {
      "problemtype_data" : [
         {
            "description" : [
               {
                  "lang" : "eng",
                  "value" : "Obtain Information"
               }
            ]
         }
      ]
   },
   "data_type" : "CVE",
   "description" : {
      "description_data" : [
         {
            "lang" : "eng",
            "value" : "IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 returns the product version and release information on the login dialog. This information could be used in further attacks against the system."
         }
      ]
   },
   "data_format" : "MITRE",
   "references" : {
      "reference_data" : [
         {
            "refsource" : "CONFIRM",
            "title" : "IBM Security Bulletin 6371260 (Financial Transaction Manager)",
            "url" : "https://www.ibm.com/support/pages/node/6371260",
            "name" : "https://www.ibm.com/support/pages/node/6371260"
         },
         {
            "name" : "ibm-ftm-cve20204908-info-disc (191113)",
            "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/191113",
            "title" : "X-Force Vulnerability Report",
            "refsource" : "XF"
         }
      ]
   },
   "impact" : {
      "cvssv3" : {
         "TM" : {
            "RL" : "O",
            "RC" : "C",
            "E" : "U"
         },
         "BM" : {
            "I" : "N",
            "A" : "N",
            "C" : "L",
            "PR" : "N",
            "S" : "U",
            "SCORE" : "5.300",
            "AC" : "L",
            "AV" : "N",
            "UI" : "N"
         }
      }
   },
   "affects" : {
      "vendor" : {
         "vendor_data" : [
            {
               "product" : {
                  "product_data" : [
                     {
                        "version" : {
                           "version_data" : [
                              {
                                 "version_value" : "3.2.4"
                              }
                           ]
                        },
                        "product_name" : "Financial Transaction Manager"
                     }
                  ]
               },
               "vendor_name" : "IBM"
            }
         ]
      }
   }
}