CVE-2020-4590

🗓️ 21 Sep 2020 14:55:25Reported by ibmType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 56 Views

IBM WebSphere App Server Liberty 17.0.0.3-20.0.0.9 OAuth 2.0 & OpenID Connect Server 1.0 feature DoS vulnerabilit

Reporter	Title	Published	Views	Family All 30
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in WebSphere Application Server affect Predictive Maintenance and Quality and Predictive Maintenance Insights	19 Oct 202015:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to a WebSphere Application Server Liberty vulnerability (CVE-2020-4590)	26 Feb 202115:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM WebSphere Appilcation Server and WebSphere Application Server Liberty affects IBM Engineering ELM products based on IBM Jazz technology.	12 Nov 202015:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is affected by a vulnerability in WebSphere Application Server Liberty (CVE-2020-4590)	11 Dec 202015:34	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in WebSphere Liberty Profile affect IBM InfoSphere Global Name Management (CVE-2020-5258, CVE-2020-4590, CVE-2020-4421)	20 Apr 202217:04	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Websphere Liberty server (WLP) affects IBM Cloud Application Business Insights	4 Feb 202107:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to a security vulnerability (CVE-2020-4590)	8 Jul 202117:58	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of service vulnerability in WebSphere Application Server Liberty shipped with IBM WebSphere Application Server Patterns (CVE-2020-4590)	17 Sep 202014:43	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in WebSphere Application Server Liberty affect IBM Operations Analytics - Log Analysis (CVE-2020-4590)	1 Oct 202008:10	–	ibm
IBM Security Bulletins	WebSphere Application Server and IBM HTTP Server Security Bulletin List	13 Jul 202218:04	–	ibm

NVD

Vulners

Node

ibm websphere_application_serverRange17.0.0.3–20.0.0.9liberty

[
  {
    "product": "WebSphere Application Server Liberty",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "17.0.0.3"
      },
      {
        "status": "affected",
        "version": "20.0.0.9"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/6333623
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/184650

21 Nov 2024 05:32Current

6.3Medium risk

Vulners AI Score6.3

CVSS 24

CVSS 3.16.5

CVSS 35.3

EPSS0.00448