What is CVE-2020-4893?

CVE-2020-4893 is a medium-severity vulnerability in Ibm Emptoris Strategic Supply Management, classified under Cleartext Transmission of Sensitive Information. CVSS score: 5.9/10. Published 2021-01-07.

How severe is CVE-2020-4893?

Medium severity. CVSS v3 base score is 5.9 out of 10.

Vulnerability in Ibm Emptoris Strategic Supply Management

CVE-2020-4893

IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 transmits sensitive information in HTTP GET request parameters. This may lead to information disclosure via man in the middle methods. IBM X-Force ID: 190984.

EPSS: 0.006 (47.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Ibm Emptoris Strategic Supply Management — versions 10.1.0, 10.1.1, 10.1.3
Ibm Emptoris_strategic_supply_management

Weakness classification (CWE)

CWE-319 — Cleartext Transmission of Sensitive Information

References

psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
psirt@us.ibm.com (VDB Entry, vdb-entry, Vendor Advisory, x_refsource_XF)

Frequently asked questions

What is CVE-2020-4893?: CVE-2020-4893 is a medium-severity vulnerability in Ibm Emptoris Strategic Supply Management, classified under Cleartext Transmission of Sensitive Information. CVSS score: 5.9/10. Published 2021-01-07.
How severe is CVE-2020-4893?: Medium severity. CVSS v3 base score is 5.9 out of 10.