CVE-2020-4695

CWE-319 — Cleartext TransmissionCWE-3113 documents3 sources
Severity
7.5HIGH
EPSS
0.1%
top 73.40%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM API Connect
Timeline
PublishedMar 8
Latest updateMay 24

Description

IBM API Connect V10 is impacted by insecure communications during database replication. As the data replication happens over insecure communication channels, an attacker can view unencrypted data leading to a loss of confidentiality.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶NVDibm/api_connect10.0.0.0 — 10.0.1.0
▶CVEListV5ibm/api_connect10.0.0.0, 10.0.1.0+1

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-859g-2jp2-5w55: IBM API Connect V10 is impacted by insecure communications during database replication↗2022-05-24
▶
CVEList
CVE-2020-4695: IBM API Connect V10 is impacted by insecure communications during database replication↗2021-03-08
▶