Lucene search

IBMED45B3D03432EA991E20FCFB7B9FD0CD25D3E1B834197F239D900E5975F863A2

HistoryJul 25, 2022 - 8:39 p.m.

Security Bulletin: WebSphere network security vulnerability in IBM Content Foundation on Cloud

2022-07-2520:39:06

www.ibm.com

websphere

ibm content foundation on cloud

security vulnerability

versions 5.5.0

5.5.3

5.5.4

cve-2020-4329

websphere fix

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

0.001

Percentile

32.8%

JSON

Summary

WebSphere network security vulnerability in IBM Content Foundation on Cloud containers

Vulnerability Details

CVEID:CVE-2020-4329
**DESCRIPTION:**IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote, authenticated attacker to obtain sensitive information, caused by improper parameter checking. This could be exploited to conduct spoofing attacks. IBM X-Force ID: 177841.
CVSS Base score: 4.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/177841 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)

Affected Products and Versions

Affected Product(s)	Version(s)
IBM Content Foundation on Cloud	5.5.0

Remediation/Fixes

WebSphere security vulnerabilities

Install WebSphere fix, or one of the below releases to resolve the security vulnerabilities.

Product	VRMF	APAR	Remediation/First Fix
IBM Content Foundation on Cloud	5.5.3
5.5.4	PJ46159
PJ46159	5.5.3.0-P8CPE-Container-IF003 - July 16, 2020
5.5.4.0-P8CPE-Container-IF002 - July 21, 2020

Only versions covered by continuous support for fixes are listed. Please apply the listed update to remediate.

Workarounds and Mitigations

None

Affected configurations

Vulners

Node

ibmfilenet_content_managerMatch5.5.3

ibmfilenet_content_managerMatch5.5.4

VendorProductVersionCPE
ibmfilenet_content_manager5.5.3cpe:2.3:a:ibm:filenet_content_manager:5.5.3:*:*:*:*:*:*:*
ibmfilenet_content_manager5.5.4cpe:2.3:a:ibm:filenet_content_manager:5.5.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	filenet_content_manager	5.5.3	cpe:2.3:a:ibm:filenet_content_manager:5.5.3:::::::*
ibm	filenet_content_manager	5.5.4	cpe:2.3:a:ibm:filenet_content_manager:5.5.4:::::::*

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

0.001

Percentile

32.8%

JSON

Related for ED45B3D03432EA991E20FCFB7B9FD0CD25D3E1B834197F239D900E5975F863A2