CVE-2020-4205: Medium severity IBM DataPower Gateway vulnerability
IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could allow an authenticated user to bypass security restrictions, and continue to access the server even after authentication certificates have been revolked. IBM X-Force ID: 174961.
Other sources
IBM DataPower Gateway could allow an authenticated user to bypass security restrictions, and continue to access the server even after authentication certificates have been revolked.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM DataPower Gatewayto a version that resolves this vulnerability.Patch IBM X-Force ID: 174961
Event History
Frequently Asked Questions
What is CVE-2020-4205?
CVE-2020-4205 is a vulnerability in IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 that allows an authenticated user to bypass security restrictions and continue accessing the server even after authentication certificates have been revoked.
What is the severity of CVE-2020-4205?
The severity of CVE-2020-4205 is medium, with a severity value of 6.3.
How does CVE-2020-4205 affect IBM DataPower Gateway?
CVE-2020-4205 affects IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8, allowing an authenticated user to bypass security restrictions.
How can I fix CVE-2020-4205?
To fix CVE-2020-4205, upgrade IBM DataPower Gateway to a version outside the vulnerable range (2018.4.1.0-2018.4.1.8).
Where can I find more information about CVE-2020-4205?
You can find more information about CVE-2020-4205 at the IBM X-Force ID (174961) and the IBM support page.