CVE-2020-4821

EPSS 2%
Veröffentlicht 16.07.2021 17:15:11
Zuletzt bearbeitet 21.11.2024 05:33:17
Erkennungen
Login

IBM InfoSphere Data Replication 11.4 and IBM InfoSphere Change Data Capture for z/OS 10.2.1, under certain configurations, could allow a user to bypass authentication mechanisms using an empty password string. IBM X-Force ID: 189834

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 6

NVD 5 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Infosphere Data Replication Version 11.4

Ibm ≫ Infosphere Data Replication Version 11.4.0

Ibm ≫ Infosphere Change Data Capture Version 10.2.1 SwPlatform z/os

Ibm ≫ Infosphere Change Data Capture Version 11.3.3 SwPlatform z/os

Ibm ≫ Infosphere Change Data Capture Version 11.4 SwPlatform z/os

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2%	0.782

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P
IBM	5.9	2.2	3.6	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N