CVE-2020-4205

5MEDIUM

Key Information:

Vendor
IBM
Status
Datapower Gateway
Vendor
CVE Published:
19 March 2020

Summary

IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could allow an authenticated user to bypass security restrictions, and continue to access the server even after authentication certificates have been revolked. IBM X-Force ID: 174961.

Affected Version(s)

DataPower Gateway 2018.4.1.0

DataPower Gateway 2018.4.1.8

References

https://www.ibm.com/support/pages/node/6090886
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/174961
vdb-entryx_refsource_XF

CVSS V3.1

Score:
5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.