CVE-2020-4421

No fix known EPSS <1%CVSS 5.0

IBM WebSphere Application Liberty 19.0.0.5 through 20.0.0.4 could allow an authenticated user using openidconnect to spoof another users identify. IBM X-Force ID: 180084.

Published 2020-05-06 · CVE record · OSV

Products: IBM WebSphere Application Server Liberty