Denial of Service Vulnerability in IBM DataPower Gateway
CVE-2020-4580
7.5HIGH
Summary
The vulnerability in IBM DataPower Gateway allows a remote attacker to exploit a flaw related to processing JSON requests. By sending a specially crafted JSON request containing invalid characters, an attacker could potentially disrupt the service, leading to a denial of service condition. Administrators should ensure they are running a secure version of the DataPower Gateway and apply any necessary patches from IBM.
Affected Version(s)
DataPower Gateway 2018.4.1.0
DataPower Gateway 2018.4.1.12
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved