CVE-2020-4329

IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote, authenticated attacker to obtain sensitive…

Medium · published April 28, 2020

CVSS v3.0
4.3
EPSS
1%
Percentile
65.9
In the wild
Unconfirmed
What it is

IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote, authenticated attacker to obtain sensitive information, caused by improper parameter checking. This could be exploited to conduct spoofing attacks. IBM X-Force ID: 177841.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/PR:L/AV:N/C:L/A:N/AC:L/S:U/I:N/UI:N/RL:O/RC:C/E:U
CVSS v4.0
Not supplied
EPSS
0.01120 · 65.9th percentile
Published
2020-04-28T13:30Z
EPSS history
Timeline
  • 28 APR 13:30Z
    IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote, authenticated attacker to obtain sensitive…
    cvelistv5