Lucene search

Datapower Gateway Security Vulnerabilities - March 2020

cve

CVE-2020-4203

IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could potentially disclose highly sensitive information to a privileged user due to improper access controls. IBM X-Force ID: 174956.

4.9CVSS

4.8AI Score

0.001EPSS

2020-03-19 02:15 PM

cve

CVE-2020-4205

IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could allow an authenticated user to bypass security restrictions, and continue to access the server even after authentication certificates have been revolked. IBM X-Force ID: 174961.

6.3CVSS

6.3AI Score

0.001EPSS

2020-03-19 02:15 PM