Denial of Service Vulnerability in IBM DataPower Gateway
CVE-2020-4580

7.5HIGH

Key Information:

Vendor

IBM
Status
Datapower Gateway
Vendor
CVE Published:
21 September 2020

What is CVE-2020-4580?

The vulnerability in IBM DataPower Gateway allows a remote attacker to exploit a flaw related to processing JSON requests. By sending a specially crafted JSON request containing invalid characters, an attacker could potentially disrupt the service, leading to a denial of service condition. Administrators should ensure they are running a secure version of the DataPower Gateway and apply any necessary patches from IBM.

Affected Version(s)

DataPower Gateway 2018.4.1.0

DataPower Gateway 2018.4.1.12

References

https://www.ibm.com/support/pages/node/6334705
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/184439
vdb-entryx_refsource_XF

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.