What’s Vulnerable › Vulnerabilities

CVE-2020-4821

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-07-16 · updated 2026-06-17
• Weakness: CWE-287

Description

IBM InfoSphere Data Replication 11.4 and IBM InfoSphere Change Data Capture for z/OS 10.2.1, under certain configurations, could allow a user to bypass authentication mechanisms using an empty password string. IBM X-Force ID: 189834

Affected products

• IBM Infosphere Change Data Capture: 10.2.1, 11.3.3, 11.4
• IBM InfoSphere Data Replication: 11.4, 11.4.0

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/189834
• https://www.ibm.com/support/pages/node/6472909
• https://www.ibm.com/support/pages/node/6472911
• https://exchange.xforce.ibmcloud.com/vulnerabilities/189834
• https://www.ibm.com/support/pages/node/6472909
• https://www.ibm.com/support/pages/node/6472911

Get alerted when CVE-2020-4821 or the next vulnerability affects your stack