{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2020-4729", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2019-12-30T00:00:00.000Z", "datePublished": "2023-04-28T01:11:03.737Z", "dateUpdated": "2024-08-04T08:14:57.903Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Safer Payments", "vendor": "IBM", "versions": [{"lessThanOrEqual": "5.7.0.10", "status": "affected", "version": "5.7.0.00", "versionType": "semver"}, {"lessThanOrEqual": "6.0.0.07", "status": "affected", "version": "6.0.0.00", "versionType": "semver"}, {"lessThanOrEqual": "6.1.0.05", "status": "affected", "version": "6.1.0.00", "versionType": "semver"}, {"lessThanOrEqual": "6.2.1.00", "status": "affected", "version": "6.2.0.00", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "IBM Counter Fraud Management for Safer Payments 5.7.0.00 through 5.7.0.10, 6.0.0.00 through 6.0.0.07, 6.1.0.00 through 6.1.0.05, and 6.2.0.00 through 6.2.1.00 could allow an authenticated attacker under special circumstances to send multiple specially crafted API requests that could cause the application to crash. IBM X-Force ID: 188052."}], "value": "IBM Counter Fraud Management for Safer Payments 5.7.0.00 through 5.7.0.10, 6.0.0.00 through 6.0.0.07, 6.1.0.00 through 6.1.0.05, and 6.2.0.00 through 6.2.1.00 could allow an authenticated attacker under special circumstances to send multiple specially crafted API requests that could cause the application to crash. IBM X-Force ID: 188052."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"description": "399 Resource Management Errors", "lang": "en"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2023-04-28T01:11:03.737Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://www.ibm.com/support/pages/node/6985595"}, {"tags": ["vdb-entry"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/188052"}], "source": {"discovery": "UNKNOWN"}, "title": "IBM Safer Payments denial of service", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T08:14:57.903Z"}, "title": "CVE Program Container", "references": [{"tags": ["vendor-advisory", "x_transferred"], "url": "https://www.ibm.com/support/pages/node/6985595"}, {"tags": ["vdb-entry", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/188052"}]}]}}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:safer_payments:*:*:*:*:*:*:*:*", "matchCriteriaId": "0AEFA29E-F86F-464B-BC44-F1E4C28264DD", "versionEndExcluding": "5.7.0.11", "versionStartIncluding": "5.7.0.00", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:safer_payments:*:*:*:*:*:*:*:*", "matchCriteriaId": "358ECF1F-535B-4450-9AF4-2F69CB706331", "versionEndExcluding": "6.0.0.08", "versionStartIncluding": "6.0.0.00", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:safer_payments:*:*:*:*:*:*:*:*", "matchCriteriaId": "49094F58-A35E-460A-A64D-6380FEBF16C9", "versionEndExcluding": "6.1.0.06", "versionStartIncluding": "6.1.0.00", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:safer_payments:*:*:*:*:*:*:*:*", "matchCriteriaId": "DE0C4698-110B-4296-A661-65501DE5472A", "versionEndExcluding": "6.2.1.01", "versionStartIncluding": "6.2.0.00", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "IBM Counter Fraud Management for Safer Payments 5.7.0.00 through 5.7.0.10, 6.0.0.00 through 6.0.0.07, 6.1.0.00 through 6.1.0.05, and 6.2.0.00 through 6.2.1.00 could allow an authenticated attacker under special circumstances to send multiple specially crafted API requests that could cause the application to crash. IBM X-Force ID: 188052."}], "id": "CVE-2020-4729", "lastModified": "2024-11-21T05:33:11.017", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 3.6, "source": "[email protected]", "type": "Secondary"}, {"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 3.6, "source": "[email protected]", "type": "Primary"}]}, "published": "2023-04-28T02:15:08.697", "references": [{"source": "[email protected]", "tags": ["VDB Entry", "Vendor Advisory"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/188052"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "https://www.ibm.com/support/pages/node/6985595"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["VDB Entry", "Vendor Advisory"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/188052"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.ibm.com/support/pages/node/6985595"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "[email protected]", "type": "Primary"}]}

{}