CVE-2020-4276 - IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional is vulnerable to a privilege escalation vulnerability when using token-based authentication in an admin request over the SOAP connector

Back Back to CVE browser

HIGH

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional is vulnerable to a privilege escalation vulnerability when using token-based authentication in an admin request over the SOAP connector

Published Mar 26, 2020

7.5

HIGH

CVSS 3.1

EPSS 3.12%

Description

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional is vulnerable to a privilege escalation vulnerability when using token-based authentication in an admin request over the SOAP connector. X-Force ID: 175984.

Affected products

Vendor IBM Product WebSphere Application Server Default
n/a
- Version
  7.0
  Status
  affected
  Constraints
  -
- Version
  8.0
  Status
  affected
  Constraints
  -
- Version
  8.5
  Status
  affected
  Constraints
  -
- Version
  9.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

WebSphere Application Server

n/a

Version	Status	Constraints
7.0	affected	-
8.0	affected	-
8.5	affected	-
9.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://exchange.xforce.ibmcloud.com/vulnerabilities/175984
vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6118222
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilities/175984		vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6118222		x_refsource_CONFIRMPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ibm

Published Mar 26, 2020

Updated Sep 17, 2024

Reserved Dec 30, 2019

Link CVE-2020-4276

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-4276

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-4276