CVE-2020-4203 - IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could potentially disclose highly sensitive information to a privileged user due to improper access controls

Back Back to CVE browser

MEDIUM

IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could potentially disclose highly sensitive information to a privileged user due to improper access controls

Published Mar 19, 2020

4.9

MEDIUM

CVSS 3.1

EPSS 1.29%

Description

IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could potentially disclose highly sensitive information to a privileged user due to improper access controls. IBM X-Force ID: 174956.

Affected products

Vendor IBM Product DataPower Gateway Default
unknown
Affected
- 2018.4.1.0
- 2018.4.1.8

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
IBM	DataPower Gateway	unknown	Affected 2018.4.1.0 2018.4.1.8

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25450
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/174956
vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6090934
x_refsource_CONFIRMBroken Link

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25450		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/174956		vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6090934		x_refsource_CONFIRMBroken Link

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ibm

Published Mar 19, 2020

Updated Sep 16, 2024

Reserved Dec 30, 2019

Link CVE-2020-4203

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-4203

Red Hat

No data

ENISA EUVD

Assigner ibm

Published Mar 19, 2020

Updated Sep 16, 2024

Link EUVD-2020-25450

GitHub

No data