CVE-2020-4632

CWE-918 — Server-Side Request Forgery (SSRF)3 documents3 sources

Severity

6.5MEDIUM

EPSS

0.1%

top 69.03%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Infosphere Information Server IBM Infosphere Metadata Asset Manager

Timeline

PublishedSep 4

Latest updateMay 24

Description

IBM InfoSphere Metadata Asset Manager 11.7 is vulnerable to server-side request forgery. By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to submit or control server requests. IBM X-Force ID: 185416.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶NVDibm/infosphere_metadata_asset_manager11.7

▶CVEListV5ibm/infosphere_information_server11.7

🔴Vulnerability Details

GHSA

GHSA-8f68-9j59-9cmx: IBM InfoSphere Metadata Asset Manager 11↗2022-05-24

▶

CVEList

CVE-2020-4632: IBM InfoSphere Metadata Asset Manager 11↗2020-09-04

▶