{"id":"CVE-2020-4320","aliases":["EUVD-2020-25567","GHSA-h8p9-p3q3-7x89"],"status":"published","title":"IBM MQ Appliance and IBM MQ AMQP Channels 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD do not correctly...","description":"IBM MQ Appliance and IBM MQ AMQP Channels 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD do not correctly block or allow clients based on the certificate distinguished name SSLPEER setting. IBM X-Force ID: 177403.","severity":{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/I:N/AC:H/S:U/PR:L/A:H/C:N/UI:N/RC:C/RL:O/E:U","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00723,"percentile":0.54304,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-295"],"published":"2020-06-16T13:45:21Z","modified":"2026-06-17T03:19:49Z","products":[{"vendor":"ibm","product":"mq"}],"references":[{"url":"https://www.ibm.com/support/pages/node/5736885","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/177403","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-4320"},{"url":"https://github.com/advisories/GHSA-h8p9-p3q3-7x89"}],"sources":{"cve":[{"id":"CVE-2020-4320","description":"IBM MQ Appliance and IBM MQ AMQP Channels 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD do not correctly block or allow clients based on the certificate distinguished name SSLPEER setting. IBM X-Force ID: 177403.","status":"published","published":"2020-06-16T13:45:21.961Z","modified":"2024-09-16T20:58:27.407Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/I:N/AC:H/S:U/PR:L/A:H/C:N/UI:N/RC:C/RL:O/E:U","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:35:55.797746Z"}],"euvd":[{"id":"EUVD-2020-25567","description":"IBM MQ Appliance and IBM MQ AMQP Channels 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD do not correctly block or allow clients based on the certificate distinguished name SSLPEER setting. IBM X-Force ID: 177403.","status":"published","published":"2020-06-16T13:45:21Z","modified":"2024-09-16T20:58:27Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/I:N/AC:H/S:U/PR:L/A:H/C:N/UI:N/RC:C/RL:O/E:U","level":"medium"}],"updated_at":"2026-11-03T00:55:09.104839Z"}],"ghsa":[{"id":"GHSA-h8p9-p3q3-7x89","title":"IBM MQ Appliance and IBM MQ AMQP Channels 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD do not correctly...","description":"IBM MQ Appliance and IBM MQ AMQP Channels 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD do not correctly block or allow clients based on the certificate distinguished name SSLPEER setting. IBM X-Force ID: 177403.","status":"published","published":"2022-05-24T17:20:38Z","modified":"2023-01-29T05:03:02Z","updated_at":"2026-11-02T14:45:13.764942Z"}],"nvd":[{"id":"CVE-2020-4320","description":"IBM MQ Appliance and IBM MQ AMQP Channels 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD do not correctly block or allow clients based on the certificate distinguished name SSLPEER setting. IBM X-Force ID: 177403.","status":"published","published":"2020-06-16T14:15:11.463Z","modified":"2026-06-17T03:19:49.647Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T14:06:07.249892Z"}]}}