Information Disclosure Vulnerability in IBM WebSphere Application Server
CVE-2020-4329

4.3MEDIUM

Key Information:

Vendor: IBM
Status: Websphere Application Server Liberty; Websphere Application Server
Vendor: CVE Published:; 28 April 2020

Summary

A vulnerability exists in IBM WebSphere Application Server that enables a remote, authenticated attacker to exploit improper parameter validation. This flaw could lead to unauthorized access to sensitive information, potentially facilitating spoofing attacks. The versions affected include WebSphere Application Server from 7.0 to 9.0 and Liberty from 17.0.0.3 to 20.0.0.4, as detailed in IBM's security advisory.

Affected Version(s)

WebSphere Application Server 7.0

WebSphere Application Server 8.0

WebSphere Application Server 8.5

References

https://www.ibm.com/support/pages/node/6201862

x_refsource_CONFIRM

https://exchange.xforce.ibmcloud.com/vulnerabilities/177841

vdb-entryx_refsource_XF

CVSS V3.1

Score:

4.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

None

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Apr 28, 2020
Vulnerability Reserved
Dec 30, 2019