CVE-2020-4590

published 2020-09-21

CVE-2020-4590: IBM WebSphere Application Server Liberty 17.0.0.3 through 20.0.0.9 running oauth-2.0 or openidConnectServer-1.0 server features is vulnerable to a denial of…

medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C N I N A H

IBM WebSphere Application Server Liberty 17.0.0.3 through 20.0.0.9 running oauth-2.0 or openidConnectServer-1.0 server features is vulnerable to a denial of service attack conducted by an authenticated client. IBM X-Force ID: 184650.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
ibm	websphere_application_server	17.0.0.3 – 20.0.0.9	—
ibm	websphere_application_server_liberty	—	—
ibm	websphere_application_server_liberty	—	—