CVE-2020-4421

—

CVSS 3.1

5.4 medium

EPSS

<1%p48

Published

May 6, 2020 (May 6, 2020)

Modified

Jun 17, 2026

Description

IBM WebSphere Application Liberty 19.0.0.5 through 20.0.0.4 could allow an authenticated user using openidconnect to spoof another users identify. IBM X-Force ID: 180084.

Vendors: ibm
Products: websphere application server
Weakness: CWE-290
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.