CVE-2020-4899: Critical severity IBM API Connect vulnerability

Q: What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2020-4899.

Q: What is the severity of CVE-2020-4899?

The severity of CVE-2020-4899 is critical.

Q: Which software versions are affected by CVE-2020-4899?

CVE-2020-4899 affects IBM API Connect versions 5.0.0.0 through 5.0.8.10.

Q: How can CVE-2020-4899 potentially impact my data?

CVE-2020-4899 could potentially leak sensitive information or allow for data corruption due to plain text transmission of sensitive information across the network.

Q: Is there a fix available for CVE-2020-4899?

To fix CVE-2020-4899, install the necessary updates provided by IBM.

Published Jan 4, 2021

Updated

IBM API Connect 5.0.0.0 through 5.0.8.10 could potentially leak sensitive information or allow for data corruption due to plain text transmission of sensitive information across the network. IBM X-Force ID: 190990.

Other sources

IBM API Connect could potentially leak sensitive information or allow for data corruption due to plain text transmission of sensitive information across the network.

Affected Software

2 affected components

IBM API Connect>=5.0.0.0<=5.0.8.10

IBM API Connect<=IBM API Connect V5.0.0.0-5.0.8.10

Event History

Jan 4, 2021

CVE Published

via IBM·12:00 AM

Jan 5, 2021

CVE Published

via MITRE·03:10 PM

Data Sourced

via MITRE·03:10 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6395568

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2020-4899.

What is the severity of CVE-2020-4899?

The severity of CVE-2020-4899 is critical.

Which software versions are affected by CVE-2020-4899?