Lucene search
IbmCVELIST:CVE-2020-4590HistorySep 21, 2020 - 2:55 p.m.
CVE-2020-4590
2020-09-2114:55:25
ibm
www.cve.org
10
ibm
websphere
liberty
oauth 2.0
openid connect
dos
vulnerability
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
EPSS
0.001
Percentile
32.8%
IBM WebSphere Application Server Liberty 17.0.0.3 through 20.0.0.9 running oauth-2.0 or openidConnectServer-1.0 server features is vulnerable to a denial of service attack conducted by an authenticated client. IBM X-Force ID: 184650.
CNA Affected
[
{
"product": "WebSphere Application Server Liberty",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "17.0.0.3"
},
{
"status": "affected",
"version": "20.0.0.9"
}
]
}
]Related
nvd
nvd
CVE-2020-4590
2020-09-21 15:15:13
ibm
ibm
cve
cve
CVE-2020-4590
2020-09-21 15:15:13
prion
prion
Design/Logic Flaw
2020-09-21 15:15:00
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
EPSS
0.001
Percentile
32.8%
Related for CVELIST:CVE-2020-4590