NetSight
IP …
critical9.8

CVE-2020-4821

IBM InfoSphere Data Replication 11.4 and IBM InfoSphere Change Data Capture for z/OS 10.2.1, under certain configurations, could allow a user to bypass authent…

Impact

IBM InfoSphere Data Replication 11.4 and IBM InfoSphere Change Data Capture for z/OS 10.2.1, under certain configurations, could allow a user to bypass authentication mechanisms using an empty password string. IBM X-Force ID: 189834

Affected products

VendorProductAffected versions
IbmInfosphere Data Replication
Versions 11.4, 11.4.0
IbmInfosphere Change Data Capture
Versions 10.2.1, 11.3.3, 11.4

Weakness classification

CWE-287

References