CVE-2020-4779

A HTTP Verb Tampering vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10

High · published October 12, 2020

CVSS v3.0
8.1
EPSS
1%
Percentile
65.8
In the wild
Unconfirmed
What it is

A HTTP Verb Tampering vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. By sending a specially-crafted request, an attacker could exploit this vulnerability to bypass security access controls. IBM X-Force ID: 189156.

The record
Technical detail
CVSS v3.0
8.1 · HIGH
Vector
CVSS:3.0/AV:N/A:N/PR:L/S:U/UI:N/C:H/I:H/AC:L/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.01114 · 65.8th percentile
Published
2020-10-12T13:05Z
EPSS history
Timeline
  • 12 OCT 13:05Z
    A HTTP Verb Tampering vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10
    cvelistv5