by Kastro
Paper/Archive/CVE-2020-4899

CVE-2020-4899

IBM API Connect — IBM API Connect 5.0.0.0 through 5.0.8.10 could potentially leak sensitive information or allow for data corruption due to plain text tran…

EPSS 0.8%CVSS 9.1
critical.is priorityof 100
38
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 55.7.557 × 2011.1No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

IBM API Connect 5.0.0.0 through 5.0.8.10 could potentially leak sensitive information or allow for data corruption due to plain text transmission of sensitive information across the network. IBM X-Force ID: 190990.

Affected

ProductAffectedFixed inSource
API Connect5.0.0.0–CNA
API Connect5.0.8.8–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
ibm (CNA)7.4CVSS:3.0/S:U/AC:H/AV:N/I:H/A:N/UI:N/C:H/PR:N/RL:O/RC:C/E:U

References

refibm.com/support/pages/node/6395568refexchange.xforce.ibmcloud.com/vulnerabilities/190990