CVE-2020-4346: Medium severity api connect cli plugins vulnerability
IBM API Connect's management server has an unsecured api which can be exploited by an unauthenticated attacker to obtain sensitive information.
Other sources
IBM API Connect's V2018.4.1.0 through 2018.4.1.10 management server has an unsecured api which can be exploited by an unauthenticated attacker to obtain sensitive information. IBM X-Force ID: 178322.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2020-4346?
The severity of CVE-2020-4346 is medium with a CVSS score of 5.3.
How can an attacker exploit CVE-2020-4346?
An unauthenticated attacker can exploit CVE-2020-4346 by accessing the unsecured API of IBM API Connect's management server to obtain sensitive information.
What software versions are affected by CVE-2020-4346?
IBM API Connect versions V2018.4.1.0 through 2018.4.1.10 are affected by CVE-2020-4346.
Is there a patch available for CVE-2020-4346?
Yes, IBM has released a patch for CVE-2020-4346. You can find it at the following URL: http://www.ibm.com/support/fixcentral/swg/quickorder?parent=ibm%7EWebSphere&product=ibm/WebSphere/IBM+API+Connect&release=2018.4.1.10&platform=All&function=all&source=fc
Where can I find more information about CVE-2020-4346?
You can find more information about CVE-2020-4346 at the following URLs: - https://exchange.xforce.ibmcloud.com/vulnerabilities/178322 - https://www.ibm.com/support/pages/node/6208328