CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.9. Exploitation may require the attacker to be authenticated.
CVE
CVE-2020-4719
Severity
MEDIUM
CVSS
4.9
EPSS
0.83%
Original NVD Description
The IBM Cloud APM 8.1.4 server will issue a DNS request to resolve any hostname specified in the Cloud Event Management Webhook URL configuration definition. This could enable an authenticated user with admin authorization to create DNS query strings that are not hostnames. IBM X-Force ID: 187861.
Related CVEs
Other vulnerabilities affecting the same vendor(s)