Security Bulletin: Denial of Service in IBM DataPower Gateway (CVE-2020-4580)

Summary IBM has addressed the relevant CVE CVE-2020-4580 Vulnerability Details CVEID: CVE-2020-4580 DESCRIPTION: IBM DataPower Gateway could allow a remote attacker to cause a denial of service by sending a specially crafted a JSON request with invalid characters. CVSS Base score: 7.5 CVSS Tempor...

CVE-2020-4580

CVE-2020-4580 affects IBM DataPower Gateway 2018.4.1.0–2018.4.1.12, where a remote attacker could cause a denial of service by sending a specially crafted JSON request with invalid characters. IBM’s security bulletin confirms the issue and lists the affected versions, with a fix available in 2018...