CVE-2020-4232

CVE-2020-4232 is a username enumeration vulnerability affecting IBM Security Identity Governance and Intelligence version 5.2.6. An unauthenticated attacker can exploit this flaw to identify valid usernames, which could then be used in subsequent brute-force or credential stuffing attacks. With a CVSS score of 7.5 (High), this vulnerability is easily exploitable over the network without user interaction, potentially leading to high confidentiality impact. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.