CVE-2020-4638
CVE-2020-4638
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.2EPSS 1.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
03 Sep 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
IBM API Connect's API Manager 2018.4.1.0 through 2018.4.1.12 is vulnerable to privilege escalation. An invitee to an API Provider organization can escalate privileges by manipulating the invitation link. IBM X-Force ID: 185508.
CVSS:3.0/I:H/AC:L/S:U/C:H/AV:N/PR:H/A:H/UI:N/E:U/RC:C/RL:O
Affected products
IBM · API ConnectWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →