{"id":"CVE-2020-4729","state":"PUBLISHED","title":"IBM Safer Payments denial of service","description":"IBM Counter Fraud Management for Safer Payments 5.7.0.00 through 5.7.0.10, 6.0.0.00 through 6.0.0.07, 6.1.0.00 through 6.1.0.05, and 6.2.0.00 through 6.2.1.00 could allow an authenticated attacker under special circumstances to send multiple specially crafted API requests that could cause the application to crash.  IBM X-Force ID:  188052.","publishedAt":"2023-04-28T01:11:03.737Z","updatedAt":"2025-01-30T20:44:41.326Z","severity":{"score":5.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","source":"ibm"},"assigner":"ibm","products":["IBM Safer Payments"],"affected":[{"vendor":"IBM","product":"Safer Payments","defaultStatus":"unaffected","versions":[{"version":"5.7.0.00","status":"affected","lessThanOrEqual":"5.7.0.10","versionType":"semver"},{"version":"6.0.0.00","status":"affected","lessThanOrEqual":"6.0.0.07","versionType":"semver"},{"version":"6.1.0.00","status":"affected","lessThanOrEqual":"6.1.0.05","versionType":"semver"},{"version":"6.2.0.00","status":"affected","lessThanOrEqual":"6.2.1.00","versionType":"semver"}]}],"references":["https://www.ibm.com/support/pages/node/6985595","https://exchange.xforce.ibmcloud.com/vulnerabilities/188052"],"weaknesses":[],"ingestedAt":"2026-10-29T19:47:32.441Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/4xxx/CVE-2020-4729.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2020-4729","state":"PUBLISHED","datePublished":"2023-04-28T01:11:03.737Z","dateUpdated":"2025-01-30T20:44:41.326Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2019-12-30T00:00:00.000Z"},"containers":{"cna":{"title":"IBM Safer Payments denial of service","descriptions":[{"lang":"en","value":"IBM Counter Fraud Management for Safer Payments 5.7.0.00 through 5.7.0.10, 6.0.0.00 through 6.0.0.07, 6.1.0.00 through 6.1.0.05, and 6.2.0.00 through 6.2.1.00 could allow an authenticated attacker under special circumstances to send multiple specially crafted API requests that could cause the application to crash.  IBM X-Force ID:  188052."}],"affected":[{"vendor":"IBM","product":"Safer Payments","defaultStatus":"unaffected","versions":[{"version":"5.7.0.00","status":"affected","lessThanOrEqual":"5.7.0.10","versionType":"semver"},{"version":"6.0.0.00","status":"affected","lessThanOrEqual":"6.0.0.07","versionType":"semver"},{"version":"6.1.0.00","status":"affected","lessThanOrEqual":"6.1.0.05","versionType":"semver"},{"version":"6.2.0.00","status":"affected","lessThanOrEqual":"6.2.1.00","versionType":"semver"}]}],"references":[{"url":"https://www.ibm.com/support/pages/node/6985595","tags":["vendor-advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/188052","tags":["vdb-entry"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"description":"399 Resource Management Errors","lang":"en"}]}],"providerMetadata":{"shortName":"ibm","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateUpdated":"2023-04-28T01:11:03.737Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.ibm.com/support/pages/node/6985595","tags":["vendor-advisory","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/188052","tags":["vdb-entry","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T08:14:57.903Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-01-30T20:44:37.962162Z","id":"CVE-2020-4729","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-01-30T20:44:41.326Z"}}]}}}