1. Home
  2. CVE Database
  3. CVE-2020-4125
HIGH · 8.1

CVE-2020-4125

Using HCL Marketing Operations 9.1.2.4, 10.1.x, 11.1.0.x, a malicious attacker could download files from the RHEL environment by doing some modification in the link, giving the attacker access to conf...

Vulnerability Description

Using HCL Marketing Operations 9.1.2.4, 10.1.x, 11.1.0.x, a malicious attacker could download files from the RHEL environment by doing some modification in the link, giving the attacker access to confidential information.

CVSS Score

8.1

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
IbmMarketing Operations>= 10.1, <= 10.1.0.3

Related Weaknesses (CWE)

CWE-494

References

FAQ

What is CVE-2020-4125?

CVE-2020-4125 is a vulnerability with a CVSS score of 8.1 (HIGH). Using HCL Marketing Operations 9.1.2.4, 10.1.x, 11.1.0.x, a malicious attacker could download files from the RHEL environment by doing some modification in the link, giving the attacker access to conf...

How severe is CVE-2020-4125?

CVE-2020-4125 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-4125?

Check the references section above for vendor advisories and patch information. Affected products include: Ibm Marketing Operations.