cvelist/2020/4xxx/CVE-2020-4699.json

{
    "affects": {
        "vendor": {
            "vendor_data": [
                {
                    "vendor_name": "IBM",
                    "product": {
                        "product_data": [
                            {
                                "version": {
                                    "version_data": [
                                        {
                                            "version_value": "9.0.7"
                                        }
                                    ]
                                },
                                "product_name": "Security Access Manager"
                            },
                            {
                                "version": {
                                    "version_data": [
                                        {
                                            "version_value": "10.0.0"
                                        }
                                    ]
                                },
                                "product_name": "Security Verify Access"
                            }
                        ]
                    }
                }
            ]
        }
    },
    "description": {
        "description_data": [
            {
                "lang": "eng",
                "value": "IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further attacks against the system. IBM X-Force ID: 186947."
            }
        ]
    },
    "data_version": "4.0",
    "problemtype": {
        "problemtype_data": [
            {
                "description": [
                    {
                        "value": "Obtain Information",
                        "lang": "eng"
                    }
                ]
            }
        ]
    },
    "impact": {
        "cvssv3": {
            "TM": {
                "E": "U",
                "RL": "O",
                "RC": "C"
            },
            "BM": {
                "AC": "H",
                "I": "N",
                "C": "H",
                "S": "U",
                "UI": "N",
                "PR": "N",
                "SCORE": "5.300",
                "A": "N",
                "AV": "A"
            }
        }
    },
    "data_format": "MITRE",
    "data_type": "CVE",
    "references": {
        "reference_data": [
            {
                "title": "IBM Security Bulletin 6346619 (Security Verify Access)",
                "name": "https://www.ibm.com/support/pages/node/6346619",
                "refsource": "CONFIRM",
                "url": "https://www.ibm.com/support/pages/node/6346619"
            },
            {
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/186947",
                "title": "X-Force Vulnerability Report",
                "name": "ibm-sam-cve20204699-info-disc (186947)",
                "refsource": "XF"
            }
        ]
    },
    "CVE_data_meta": {
        "ID": "CVE-2020-4699",
        "ASSIGNER": "psirt@us.ibm.com",
        "DATE_PUBLIC": "2020-10-08T00:00:00",
        "STATE": "PUBLIC"
    }
}