CVE-2020-4821: IBM InfoSphere Change Data Capture

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

IBM InfoSphere Data Replication 11.4 and IBM InfoSphere Change Data Capture for z/OS 10.2.1, under certain configurations, could allow a user to bypass authentication mechanisms using an empty password string. IBM X-Force ID: 189834

Affected products

• IBM InfoSphere Change Data Capture: version 10.2.1 only; version 11.3.3 only; version 11.4 only
• IBM InfoSphere Data Replication: version 11.4 only; version 11.4.0 only

Published 2021-07-16. Last modified 2026-06-17.