CVE-2020-4899 - IBM API Connect 5.0.0.0 through 5.0.8.10 could potentially leak sensitive information or allow for data corruption due to plain text transmission of sensitive information across the network

Back Back to CVE browser

CRITICAL

IBM API Connect 5.0.0.0 through 5.0.8.10 could potentially leak sensitive information or allow for data corruption due to plain text transmission of sensitive information across the network

Published Jan 5, 2021

9.1

CRITICAL

CVSS 3.1

EPSS 0.77%

Description

IBM API Connect 5.0.0.0 through 5.0.8.10 could potentially leak sensitive information or allow for data corruption due to plain text transmission of sensitive information across the network. IBM X-Force ID: 190990.

Affected products

Vendor IBM Product API Connect Default
n/a
- Version
  5.0.0.0
  Status
  affected
  Constraints
  -
- Version
  5.0.8.8
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

API Connect

n/a

Version	Status	Constraints
5.0.0.0	affected	-
5.0.8.8	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-319

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26146
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/190990
vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6395568
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26146		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/190990		vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6395568		x_refsource_CONFIRMVendor Advisory