CVE-2020-4320

IBM MQ Appliance and IBM MQ AMQP Channels 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD do not correctly block or allow clients based on the certificate distinguished name SSLPEER setting. IBM X-Force ID: 177403.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
ibmCNA
5.3 MEDIUM
NETWORK
HIGH
LOW
CVSS:3.0/AV:N/I:N/AC:H/S:U/PR:L/A:H/C:N/UI:N/RC:C/RL:O/E:U
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 39%
VendorProductVersion
ibmmq
8.0.0.0 ≤
𝑥
< 8.0.0.15
ibmmq
9.0.0.0 ≤
𝑥
< 9.0.0.10
ibmmq
9.1.0 ≤
𝑥
< 9.1.5
ibmmq
9.1.0.0 ≤
𝑥
< 9.1.0.5
𝑥
= Vulnerable software versions