CVE-2020-4598

IBM Security Guardium Insights 2.0.1 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 184823.

• CWE-601

• https://exchange.xforce.ibmcloud.com/vulnerabilities/184823VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6320061Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/184823VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6320061Vendor Advisory

Published

Aug 24, 2020

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-4592IBM MQ Appliance 9.1.CD and LTS could allow an authenticated…6.5
• CVE-2020-4593IBM Security Guardium Insights 2.0.1 stores user credentials…4.4
• CVE-2020-4594IBM Security Guardium Insights 2.0.2 uses weaker than expect…7.5
• CVE-2020-4595IBM Security Guardium Insights 2.0.2 uses weaker than expect…7.5
• CVE-2020-4596IBM Security Guardium Insights 2.0.2 uses weaker than expect…7.5
• CVE-2020-4597IBM Security Guardium Insights 2.0.2 does not set the secure…4.3
• CVE-2020-4599IBM Security Guardium Insights 2.0.2 could allow a remote at…5.3
• CVE-2020-4600IBM Security Guardium Insights 2.0.2 could allow a remote at…5.3
• CVE-2020-4602IBM Security Guardium Insights 2.0.2 stores user credentials…4.4
• CVE-2020-4603IBM Security Guardium Insights 2.0.1 performs an operation a…7.2
• CVE-2020-4604IBM Security Guardium Insights 2.0.2 stores user credentials…4.4
• CVE-2020-4606IBM Security Verify Privilege Manager 10.8 is vulnerable to …4.4