CVE-2020-4421: Authentication Bypass by Spoofing

IBM WebSphere Application Liberty 19.0.0.5 through 20.0.0.4 could allow an authenticated user using openidconnect to spoof another users identify. IBM X-Force ID: 180084...

PT-2020-18061

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Liberty versions 19.0.0.5 through 20.0.0.4 Description The issue allows an authenticated user using openidconnect to spoof another user's identity. Recommendations For versions 19.0.0.5 through 20.0.0.4, consider...