CVE-2020-4248

CVE-2020-4248 describes a sensitive information disclosure vulnerability in IBM Security Identity Governance and Intelligence version 5.2.6. A remote attacker could exploit this by triggering detailed technical error messages in the browser, potentially revealing information useful for subsequent attacks. This vulnerability has a low CVSS score of 2.7, indicating a network attack vector with low complexity, requiring high privileges, and resulting in low confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.