PT-2020-18007 · Ibm · Ibm Api Connect

Published 2020-09-03 · Updated 2020-09-10 · CVE-2020-4337

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions IBM API Connect versions 2018.4.1.0 through 2018.4.1.12

Description The issue allows an attacker to launch phishing attacks by tricking the server into generating user registration emails that contain malicious URLs.

Recommendations For versions 2018.4.1.0 through 2018.4.1.12, update to a version that contains a fix for this issue to prevent phishing attacks.

Fix

Related Identifiers

CVE-2020-4337

Affected Products

Ibm Api Connect

References · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/177933 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-4337 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-4337 · Security Note
• https://ibm.com/support/pages/node/6324763 · Vendor Advisory