CVE-2020-4548 - IBM Content Navigator 3.0.7 and 3.0.8 is vulnerable to improper input validation

Back Back to CVE browser

LOW

IBM Content Navigator 3.0.7 and 3.0.8 is vulnerable to improper input validation

Published Aug 20, 2020

2.7

LOW

CVSS 3.1

EPSS 0.73%

Description

IBM Content Navigator 3.0.7 and 3.0.8 is vulnerable to improper input validation. A malicious administrator could bypass the user interface and send requests to the IBM Content Navigator server with illegal characters that could be stored in the IBM Content Navigator database. IBM X-Force ID: 183316.

Affected products

Vendor IBM Product Content Navigator Default
n/a
- Version
  3.0.7
  Status
  affected
  Constraints
  -
- Version
  3.0.8
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

Content Navigator

n/a

Version	Status	Constraints
3.0.7	affected	-
3.0.8	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25795
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/183316
vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6262411
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25795		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/183316		vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6262411		x_refsource_CONFIRMVendor Advisory