{"id":"CVE-2020-4699","state":"PUBLISHED","title":"IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further att","description":"IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further attacks against the system. IBM X-Force ID: 186947.","publishedAt":"2020-10-12T13:05:35.713Z","updatedAt":"2024-09-16T20:16:56.855Z","severity":{"score":5.3,"label":"Medium","version":"3.0","vector":"CVSS:3.0/AC:H/I:N/C:H/S:U/UI:N/PR:N/A:N/AV:A/E:U/RL:O/RC:C","source":"ibm"},"assigner":"ibm","products":["IBM Security Access Manager","IBM Security Verify Access"],"affected":[{"vendor":"IBM","product":"Security Access Manager","versions":[{"version":"9.0.7","status":"affected"}]},{"vendor":"IBM","product":"Security Verify Access","versions":[{"version":"10.0.0","status":"affected"}]}],"references":["https://www.ibm.com/support/pages/node/6346619","https://exchange.xforce.ibmcloud.com/vulnerabilities/186947"],"weaknesses":[],"ingestedAt":"2026-10-29T19:47:32.441Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/4xxx/CVE-2020-4699.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2020-4699","state":"PUBLISHED","datePublished":"2020-10-12T13:05:35.713Z","dateUpdated":"2024-09-16T20:16:56.855Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2019-12-30T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further attacks against the system. IBM X-Force ID: 186947."}],"affected":[{"vendor":"IBM","product":"Security Access Manager","versions":[{"version":"9.0.7","status":"affected"}]},{"vendor":"IBM","product":"Security Verify Access","versions":[{"version":"10.0.0","status":"affected"}]}],"references":[{"url":"https://www.ibm.com/support/pages/node/6346619","tags":["x_refsource_CONFIRM"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/186947","name":"ibm-sam-cve20204699-info-disc (186947)","tags":["vdb-entry","x_refsource_XF"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"HIGH","attackVector":"ADJACENT_NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","exploitCodeMaturity":"UNPROVEN","integrityImpact":"NONE","privilegesRequired":"NONE","remediationLevel":"OFFICIAL_FIX","reportConfidence":"CONFIRMED","scope":"UNCHANGED","temporalScore":4.6,"temporalSeverity":"MEDIUM","userInteraction":"NONE","vectorString":"CVSS:3.0/AC:H/I:N/C:H/S:U/UI:N/PR:N/A:N/AV:A/E:U/RL:O/RC:C","version":"3.0"}}],"problemTypes":[{"descriptions":[{"description":"Obtain Information","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"ibm","dateUpdated":"2020-10-12T13:05:35.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522"},"datePublic":"2020-10-08T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","DATE_PUBLIC":"2020-10-08T00:00:00","ID":"CVE-2020-4699","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Security Access Manager","version":{"version_data":[{"version_value":"9.0.7"}]}},{"product_name":"Security Verify Access","version":{"version_data":[{"version_value":"10.0.0"}]}}]},"vendor_name":"IBM"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further attacks against the system. IBM X-Force ID: 186947."}]},"impact":{"cvssv3":{"BM":{"A":"N","AC":"H","AV":"A","C":"H","I":"N","PR":"N","S":"U","UI":"N"},"TM":{"E":"U","RC":"C","RL":"O"}}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Obtain Information"}]}]},"references":{"reference_data":[{"name":"https://www.ibm.com/support/pages/node/6346619","refsource":"CONFIRM","title":"IBM Security Bulletin 6346619 (Security Verify Access)","url":"https://www.ibm.com/support/pages/node/6346619"},{"name":"ibm-sam-cve20204699-info-disc (186947)","refsource":"XF","title":"X-Force Vulnerability Report","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/186947"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.ibm.com/support/pages/node/6346619","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/186947","name":"ibm-sam-cve20204699-info-disc (186947)","tags":["vdb-entry","x_refsource_XF","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T08:14:57.822Z"}}]}}}