What is the vulnerability ID for this issue in IBM API Connect V10?

The vulnerability ID for this issue in IBM API Connect V10 is CVE-2020-4695.

What is the severity rating of CVE-2020-4695?

The severity rating of CVE-2020-4695 is high, with a value of 7.5.

How does CVE-2020-4695 impact IBM API Connect V10?

CVE-2020-4695 impacts IBM API Connect V10 by allowing attackers to view unencrypted data during database replication, leading to a loss of confidentiality.

How can I fix CVE-2020-4695 in IBM API Connect V10?

To fix CVE-2020-4695 in IBM API Connect V10, apply the patch provided by IBM, which can be found at the following link: http://www.ibm.com/support/fixcentral/swg/quickorder?parent=ibm%7EWebSphere&product=ibm/WebSphere/IBM+API+Connect&release=10.0.0.0&platform=All&function=all&source=fc

What is the Common Weakness Enumeration (CWE) ID for this vulnerability?

The Common Weakness Enumeration (CWE) ID for this vulnerability is CWE-319.

Vulnerability/
CVE-2020-4695

high

7.5

CWE

319

6/3/2021

8/3/2021

16/9/2024

CVE-2020-4695

First published: Sat Mar 06 2021(Updated: )

IBM API Connect V10 is impacted by insecure communications during database replication. As the data replication happens over insecure communication channels, an attacker can view unencrypted data leading to a loss of confidentiality.

Credit: psirt@us.ibm.com

Affected Software	Affected Version	How to fix
IBM API Connect	>=10.0.0.0<=10.0.1.0
	<=V10.0.1.0

Remedy

https://www.ibm.com/support/pages/node/6426707

Never miss a vulnerability like this again

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

IBM-6426707

Frequently Asked Questions

What is the vulnerability ID for this issue in IBM API Connect V10?
The vulnerability ID for this issue in IBM API Connect V10 is CVE-2020-4695.
What is the severity rating of CVE-2020-4695?
The severity rating of CVE-2020-4695 is high, with a value of 7.5.
How does CVE-2020-4695 impact IBM API Connect V10?
CVE-2020-4695 impacts IBM API Connect V10 by allowing attackers to view unencrypted data during database replication, leading to a loss of confidentiality.
How can I fix CVE-2020-4695 in IBM API Connect V10?
To fix CVE-2020-4695 in IBM API Connect V10, apply the patch provided by IBM, which can be found at the following link: http://www.ibm.com/support/fixcentral/swg/quickorder?parent=ibm%7EWebSphere&product=ibm/WebSphere/IBM+API+Connect&release=10.0.0.0&platform=All&function=all&source=fc
What is the Common Weakness Enumeration (CWE) ID for this vulnerability?
The Common Weakness Enumeration (CWE) ID for this vulnerability is CWE-319.

collector/nvd-index
agent/references
agent/type
agent/first-publish-date
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/weakness
agent/author
agent/severity
agent/remedy
agent/description
agent/softwarecombine
agent/tags
collector/ibm-support
source/IBM
agent/software-canonical-lookup
agent/event
vendor/ibm
canonical/ibm api connect
version/ibm api connect/10.0.0.0
version/ibm api connect/10.0.1.0
version/ibm api connect/v10.0.1.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.