CVE-2020-4827: CSRF
IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 189841.
Other sources
IBM API Connect is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-4827?
CVE-2020-4827 is a vulnerability in IBM API Connect that allows an attacker to execute malicious actions transmitted from a trusted user.
How severe is CVE-2020-4827?
The severity of CVE-2020-4827 is rated as medium with a score of 4.3 (out of 10).
Which versions of IBM API Connect are affected by CVE-2020-4827?
IBM API Connect versions 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 are affected by CVE-2020-4827.
How can I fix CVE-2020-4827?
To fix CVE-2020-4827, apply the necessary patches provided by IBM for the affected versions of API Connect.
Where can I find more information about CVE-2020-4827?
You can find more information about CVE-2020-4827 on the IBM X-Force Exchange website and the official IBM support page.