Vulnerability · Published Jul 16, 2021 · Assigned by ibm
CVE-2020-4821
Medium 5.9
In plain English
A medium-severity security flaw in InfoSphere Change Data Capture for z/OS from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.0% (higher than 81% of all known vulnerabilities).
Severity (CVSS 3.0)5.9Medium
Exploit odds (30 days)2.0%top 19.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
IBM InfoSphere Data Replication 11.4 and IBM InfoSphere Change Data Capture for z/OS 10.2.1, under certain configurations, could allow a user to bypass authentication mechanisms using an empty password string. IBM X-Force ID: 189834
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IBM | InfoSphere Change Data Capture for z/OS | 10.2.1 |
| IBM | InfoSphere Data Replication | 11.4 |
References
- https://www.ibm.com/support/pages/node/6472911 x_refsource_CONFIRM
- https://www.ibm.com/support/pages/node/6472909 x_refsource_CONFIRM
- ibm-cognos-cve20204821-sec-bypass (189834) vdb-entry, x_refsource_XF