CVE-2020-4695: High severity api connect cli plugins vulnerability
IBM API Connect V10 is impacted by insecure communications during database replication. As the data replication happens over insecure communication channels, an attacker can view unencrypted data leading to a loss of confidentiality.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue in IBM API Connect V10?
The vulnerability ID for this issue in IBM API Connect V10 is CVE-2020-4695.
What is the severity rating of CVE-2020-4695?
The severity rating of CVE-2020-4695 is high, with a value of 7.5.
How does CVE-2020-4695 impact IBM API Connect V10?
CVE-2020-4695 impacts IBM API Connect V10 by allowing attackers to view unencrypted data during database replication, leading to a loss of confidentiality.
How can I fix CVE-2020-4695 in IBM API Connect V10?
To fix CVE-2020-4695 in IBM API Connect V10, apply the patch provided by IBM, which can be found at the following link: http://www.ibm.com/support/fixcentral/swg/quickorder?parent=ibm%7EWebSphere&product=ibm/WebSphere/IBM+API+Connect&release=10.0.0.0&platform=All&function=all&source=fc
What is the Common Weakness Enumeration (CWE) ID for this vulnerability?
The Common Weakness Enumeration (CWE) ID for this vulnerability is CWE-319.