Information disclosure in IBM WebSphere Application Server and IBM WebSphere Application Server Liberty - CVE-2020-4329
Published: September 20, 2023
Vulnerability identifier: #VU80904
CSH Severity: Low
CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-4329
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to gain access to potentially sensitive information.
The vulnerability exists due to excessive data output by the application. A remote user can gain unauthorized access to sensitive information on the system.
Affected software
IBM WebSphere Application Server
IBM WebSphere Application Server Liberty
Watson Speech to Text, Text to Speech
IBM Cloud Application Business Insights
IBM CICS TX on Cloud
IBM WebSphere Application Server Liberty
Watson Speech to Text, Text to Speech
IBM Cloud Application Business Insights
IBM CICS TX on Cloud
How to mitigate CVE-2020-4329
Install updates from vendor's website.
Watson Speech to Text, Text to Speech - update to 1.1.2
IBM Cloud Application Business Insights - addressed in versions 1.1.3.1, 1.1.4.2
IBM CICS TX on Cloud - update to 10.1.0.0 126343
IBM Cloud Application Business Insights - addressed in versions 1.1.3.1, 1.1.4.2
IBM CICS TX on Cloud - update to 10.1.0.0 126343