Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-4632

Опубликовано: 04 сент. 2020
Источник: nvd
CVSS3: 5.7
CVSS3: 6.5
CVSS2: 4
EPSS Низкий

Описание

IBM InfoSphere Metadata Asset Manager 11.7 is vulnerable to server-side request forgery. By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to submit or control server requests. IBM X-Force ID: 185416.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:ibm:infosphere_metadata_asset_manager:11.7:*:*:*:*:*:*:*

EPSS

Процентиль: 31%
0.0012
Низкий

5.7 Medium

CVSS3

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-918

Связанные уязвимости

github
больше 3 лет назад

IBM InfoSphere Metadata Asset Manager 11.7 is vulnerable to server-side request forgery. By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to submit or control server requests. IBM X-Force ID: 185416.

EPSS

Процентиль: 31%
0.0012
Низкий

5.7 Medium

CVSS3

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-918