CVE-2020-4499

CRITICAL

9.8

Description

IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an unauthorized public Oauth client to bypass some or all of the authentication checks and gain access to applications. IBM X-Force ID: 182216.

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published10/15/2020

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

ibm:security_access_manageribm:security_verify_access

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/182216(psirt@us.ibm.com)

https://www.ibm.com/support/pages/node/6348046(psirt@us.ibm.com)

https://exchange.xforce.ibmcloud.com/vulnerabilities/182216(af854a3a-2127-422b-91ae-364da2661108)

https://www.ibm.com/support/pages/node/6348046(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.