Information Disclosure Vulnerability in IBM WebSphere Application Server
CVE-2020-4329
4.3MEDIUM
Key Information:
- Vendor
- IBM
- Vendor
- CVE Published:
- 28 April 2020
Summary
A vulnerability exists in IBM WebSphere Application Server that enables a remote, authenticated attacker to exploit improper parameter validation. This flaw could lead to unauthorized access to sensitive information, potentially facilitating spoofing attacks. The versions affected include WebSphere Application Server from 7.0 to 9.0 and Liberty from 17.0.0.3 to 20.0.0.4, as detailed in IBM's security advisory.
Affected Version(s)
WebSphere Application Server 7.0
WebSphere Application Server 8.0
WebSphere Application Server 8.5
References
CVSS V3.1
Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved