{"api_version":"1","generated_at":"2026-07-23T06:56:23+00:00","cve":"CVE-2020-4232","urls":{"html":"https://cve.report/CVE-2020-4232","api":"https://cve.report/api/cve/CVE-2020-4232.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2020-4232","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-4232"},"summary":{"title":"CVE-2020-4232","description":"IBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to enumerate usernames to find valid login credentials which could be used to attempt further attacks against the system. IBM X-Force ID: 175336.","state":"PUBLIC","assigner":"psirt@us.ibm.com","published_at":"2020-05-28 15:15:00","updated_at":"2021-07-21 11:39:00"},"problem_types":["CWE-307"],"metrics":[],"references":[{"url":"https://www.ibm.com/support/pages/node/6207906","name":"https://www.ibm.com/support/pages/node/6207906","refsource":"CONFIRM","tags":["Patch","Vendor Advisory"],"title":"Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to a security vulnerability (CVE-2020-4232)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/175336","name":"ibm-sig-cve20204232-info-disc (175336)","refsource":"XF","tags":["VDB Entry","Vendor Advisory"],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-4232","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-4232","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2020","cve_id":"4232","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"security_identity_governance_and_intelligence","cpe6":"5.2.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"4232","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"security_identity_governance_and_intelligence","cpe6":"5.2.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"data_version":"4.0","impact":{"cvssv3":{"TM":{"E":"U","RL":"O","RC":"C"},"BM":{"PR":"N","UI":"N","A":"N","AC":"L","SCORE":"5.300","AV":"N","C":"L","S":"U","I":"N"}}},"problemtype":{"problemtype_data":[{"description":[{"value":"Obtain Information","lang":"eng"}]}]},"CVE_data_meta":{"STATE":"PUBLIC","DATE_PUBLIC":"2020-05-27T00:00:00","ID":"CVE-2020-4232","ASSIGNER":"psirt@us.ibm.com"},"data_type":"CVE","references":{"reference_data":[{"refsource":"CONFIRM","title":"IBM Security Bulletin 6207906 (Security Identity Governance and Intelligence)","url":"https://www.ibm.com/support/pages/node/6207906","name":"https://www.ibm.com/support/pages/node/6207906"},{"refsource":"XF","title":"X-Force Vulnerability Report","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/175336","name":"ibm-sig-cve20204232-info-disc (175336)"}]},"description":{"description_data":[{"lang":"eng","value":"IBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to enumerate usernames to find valid login credentials which could be used to attempt further attacks against the system. IBM X-Force ID: 175336."}]},"affects":{"vendor":{"vendor_data":[{"vendor_name":"IBM","product":{"product_data":[{"version":{"version_data":[{"version_value":"5.2.6"}]},"product_name":"Security Identity Governance and Intelligence"}]}}]}},"data_format":"MITRE"},"nvd":{"publishedDate":"2020-05-28 15:15:00","lastModifiedDate":"2021-07-21 11:39:00","problem_types":["CWE-307"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5},"severity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.6:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2020","CveId":"4232","Ordinal":"164260","Title":"CVE-2020-4232","CVE":"CVE-2020-4232","Year":"2020"},"notes":[{"CveYear":"2020","CveId":"4232","Ordinal":"1","NoteData":"IBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to enumerate usernames to find valid login credentials which could be used to attempt further attacks against the system. IBM X-Force ID: 175336.","Type":"Description","Title":null},{"CveYear":"2020","CveId":"4232","Ordinal":"2","NoteData":"2020-05-28","Type":"Other","Title":"Published"},{"CveYear":"2020","CveId":"4232","Ordinal":"3","NoteData":"2020-05-28","Type":"Other","Title":"Modified"}]}}}