{"api_version":"1","generated_at":"2026-07-23T15:42:09+00:00","cve":"CVE-2020-4661","urls":{"html":"https://cve.report/CVE-2020-4661","api":"https://cve.report/api/cve/CVE-2020-4661.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2020-4661","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-4661"},"summary":{"title":"CVE-2020-4661","description":"IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further attacks against the system. IBM X-Force ID: 186142.","state":"PUBLIC","assigner":"psirt@us.ibm.com","published_at":"2020-10-12 13:15:00","updated_at":"2020-10-19 15:02:00"},"problem_types":["CWE-203"],"metrics":[],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/186142","name":"ibm-sam-cve20204661-info-disc (186142)","refsource":"XF","tags":["VDB Entry","Vendor Advisory"],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.ibm.com/support/pages/node/6346619","name":"https://www.ibm.com/support/pages/node/6346619","refsource":"CONFIRM","tags":["Vendor Advisory"],"title":"Security Bulletin: Security vulnerabilities have been fixed in IBM Security Access Manager and IBM Security Verify Access (CVE-2020-4661, CVE-2020-4699, CVE-2020-4660)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-4661","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-4661","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2020","cve_id":"4661","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"security_access_manager","cpe6":"9.0.7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"4661","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"security_access_manager","cpe6":"9.0.7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"4661","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"security_verify_access","cpe6":"10.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"4661","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"security_verify_access","cpe6":"10.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"impact":{"cvssv3":{"TM":{"RL":"O","RC":"C","E":"U"},"BM":{"AC":"H","I":"N","C":"H","UI":"N","S":"U","PR":"N","A":"N","SCORE":"5.300","AV":"A"}}},"problemtype":{"problemtype_data":[{"description":[{"value":"Obtain Information","lang":"eng"}]}]},"description":{"description_data":[{"value":"IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further attacks against the system. IBM X-Force ID: 186142.","lang":"eng"}]},"affects":{"vendor":{"vendor_data":[{"vendor_name":"IBM","product":{"product_data":[{"product_name":"Security Access Manager","version":{"version_data":[{"version_value":"9.0.7"}]}},{"version":{"version_data":[{"version_value":"10.0.0"}]},"product_name":"Security Verify Access"}]}}]}},"data_version":"4.0","CVE_data_meta":{"STATE":"PUBLIC","DATE_PUBLIC":"2020-10-08T00:00:00","ASSIGNER":"psirt@us.ibm.com","ID":"CVE-2020-4661"},"references":{"reference_data":[{"url":"https://www.ibm.com/support/pages/node/6346619","name":"https://www.ibm.com/support/pages/node/6346619","title":"IBM Security Bulletin 6346619 (Security Verify Access)","refsource":"CONFIRM"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/186142","refsource":"XF","name":"ibm-sam-cve20204661-info-disc (186142)","title":"X-Force Vulnerability Report"}]},"data_format":"MITRE","data_type":"CVE"},"nvd":{"publishedDate":"2020-10-12 13:15:00","lastModifiedDate":"2020-10-19 15:02:00","problem_types":["CWE-203"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.6,"impactScore":3.6},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:A/AC:M/Au:N/C:P/I:N/A:N","accessVector":"ADJACENT_NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.9},"severity":"LOW","exploitabilityScore":5.5,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:ibm:security_access_manager:9.0.7.0:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:ibm:security_verify_access:10.0.0:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2020","CveId":"4661","Ordinal":"164689","Title":"CVE-2020-4661","CVE":"CVE-2020-4661","Year":"2020"},"notes":[{"CveYear":"2020","CveId":"4661","Ordinal":"1","NoteData":"IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further attacks against the system. IBM X-Force ID: 186142.","Type":"Description","Title":null},{"CveYear":"2020","CveId":"4661","Ordinal":"2","NoteData":"2020-10-12","Type":"Other","Title":"Published"},{"CveYear":"2020","CveId":"4661","Ordinal":"3","NoteData":"2020-10-12","Type":"Other","Title":"Modified"}]}}}