Medium · 6.5 CVE-2020-4896 EUVD-2020-26143GHSA-vwcx-ffx9-jw3x

IBM Emptoris Sourcing 10.1.0, 10.1.1, and 10.1.3 is vulnerable to web cache poisoning, caused by improper input validation by modifying HTT…

Published Jan 7, 2021 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM Emptoris Sourcing 10.1.0, 10.1.1, and 10.1.3 is vulnerable to web cache poisoning, caused by improper input validation by modifying HTTP request headers. IBM X-Force ID: 190987.

Affected products

Vendor	Product	Affected	Fixed
IBM	Emptoris Sourcing	10.1.0, 10.1.1, 10.1.3	—

References

https://www.ibm.com/support/pages/node/6398284
ibm-emptoris-cve20204896-cache-poisoning (190987) vdb-entry