CVE-2020-4590

IBM WebSphere Application Server Liberty 17.0.0.3 through 20.0.0.9 running oauth-2.0 or openidConnectServer-1.0 server features is vulnerable to a denial of…

Medium · published September 21, 2020

CVSS v3.0
5.3
EPSS
1%
Percentile
68.9
In the wild
Unconfirmed
What it is

IBM WebSphere Application Server Liberty 17.0.0.3 through 20.0.0.9 running oauth-2.0 or openidConnectServer-1.0 server features is vulnerable to a denial of service attack conducted by an authenticated client. IBM X-Force ID: 184650.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/S:U/UI:N/AC:H/C:N/PR:L/I:N/AV:N/A:H/RC:C/RL:O/E:U
CVSS v4.0
Not supplied
EPSS
0.01241 · 68.9th percentile
Published
2020-09-21T14:55Z
EPSS history
Timeline
  • 21 SEP 14:55Z
    IBM WebSphere Application Server Liberty 17.0.0.3 through 20.0.0.9 running oauth-2.0 or openidConnectServer-1.0 server features is vulnerable to a denial of…
    cvelistv5