CVE-2020-4329

published 2020-04-28

CVE-2020-4329: IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote, authenticated attacker to obtain sensitive…

medium 4.3 CVSS 3.1

AV N AC L PR L UI N S U C L I N A N

IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote, authenticated attacker to obtain sensitive information, caused by improper parameter checking. This could be exploited to conduct spoofing attacks. IBM X-Force ID: 177841.

Affected

11 ranges

Vendor	Product	Version range	Fixed in
ibm	websphere_application_server	—	—
ibm	websphere_application_server	—	—
ibm	websphere_application_server	—	—
ibm	websphere_application_server	—	—
ibm	websphere_application_server	17.0.0.3 – 20.0.0.4	—
ibm	websphere_application_server	7.0.0.0 – 7.0.0.45	—
ibm	websphere_application_server	8.0.0.0 – 8.0.0.15	—
ibm	websphere_application_server	8.5.0.0 – 8.5.5.17	—
ibm	websphere_application_server	9.0.0.0 – 9.0.5.3	—
ibm	websphere_application_server_liberty	—	—
ibm	websphere_application_server_liberty	—	—

CWE-200