CVE-2020-4499
- State
- Published
- Severity
- 7.3 High
- Published
- Oct 15, 2020
- Updated
- Sep 17, 2024
- Reserved
- Dec 30, 2019
Description
IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an unauthorized public Oauth client to bypass some or all of the authentication checks and gain access to applications. IBM X-Force ID: 182216.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 7.3 High | CVSS:3.0/I:L/UI:N/AC:L/PR:N/AV:N/C:L/S:U/A:L/RC:C/E:U/RL:O | ibm |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Security Verify AccessIBM |
|
Security Access ManagerIBM |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.