CVE-2020-4896 - IBM Emptoris Sourcing 10.1.0, 10.1.1, and 10.1.3 is vulnerable to web cache poisoning, caused by improper input validation by modifying HTTP request headers

Back Back to CVE browser

MEDIUM

IBM Emptoris Sourcing 10.1.0, 10.1.1, and 10.1.3 is vulnerable to web cache poisoning, caused by improper input validation by modifying HTTP request headers

Published Jan 7, 2021

6.5

MEDIUM

CVSS 3.1

EPSS 0.82%

Description

IBM Emptoris Sourcing 10.1.0, 10.1.1, and 10.1.3 is vulnerable to web cache poisoning, caused by improper input validation by modifying HTTP request headers. IBM X-Force ID: 190987.

Affected products

Vendor IBM Product Emptoris Sourcing Default
n/a
- Version
  10.1.0
  Status
  affected
  Constraints
  -
- Version
  10.1.1
  Status
  affected
  Constraints
  -
- Version
  10.1.3
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

Emptoris Sourcing

n/a

Version	Status	Constraints
10.1.0	affected	-
10.1.1	affected	-
10.1.3	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26143
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/190987
vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6398284
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26143		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/190987		vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6398284		x_refsource_CONFIRMPatchVendor Advisory