Medium Severity
Security Bulletin: Novalink is impacted running oauth-2.0 or openidConnectServer-1.0 server features vulnerability in WebSphere Application Server Liberty (CVE-2020-4590)
Nov 12, 2020 12:20 pm EST
Categorized: Medium Severity
Share this post:
Novalink uses WebSphere Application Server Liberty. There is a running oauth-2.0 or openidConnectServer-1.0 server features vulnerability in WebSphere Application Server Liberty (CVE-2020-4590)
CVE(s): CVE-2020-4590
Affected product(s) and affected version(s):
| Affected Product(s) | Version(s) |
| NovaLink | 1.0.0.16 |
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www.ibm.com/support/pages/node/6364999
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/184650
Security Bulletin: IBM QRadar Advisor With Watson is vulnerable to cross site scripting
Oct 19, 2021 8:03 pm EDT | Medium Severity
IBM QRadar Advisor is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. ...read more
Security Bulletin: IBM® Db2® could allow a local user to read and write specific files due to weak file permissions (CVE-2020-4976)
Oct 19, 2021 8:01 pm EDT | Medium Severity
IBM® Db2® could allow a local user to read and write specific files due to weak file permissions ...read more
Security Bulletin: IBM® Db2® is vulnerable to an information disclosure, exposing remote storage credentials to privileged users under specific conditions.(CVE-2021-29752)
Oct 19, 2021 8:01 pm EDT | Medium Severity
IBM® Db2® is vulnerable to an information disclosure, exposing remote storage credentials to privileged users under specific conditions.(CVE-2021-29752) ...read more