CVE-2020-4821
Critical
Description
IBM InfoSphere Data Replication 11.4 and IBM InfoSphere Change Data Capture for z/OS 10.2.1, under certain configurations, could allow a user to bypass authentication mechanisms using an empty password string. IBM X-Force ID: 189834
SeverityCritical
CVSS9.8
Exploit probability—
Product
Ibm Infosphere Data Replication
PublishedJul 16, 2021
First seenJul 16, 2021
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm infosphere_data_replication | 11.4, 11.4.0 | — |
| ibm infosphere_change_data_capture | 10.2.1, 11.3.3, 11.4 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.