Lucene search

IbmCVELIST:CVE-2019-4640

HistoryFeb 19, 2020 - 3:15 p.m.

CVE-2019-4640

2020-02-1915:15:45

ibm

www.cve.org

CVSS3

4.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C

AI Score

8.9

Confidence

High

EPSS

0.002

Percentile

51.5%

JSON

IBM Security Secret Server 10.7 processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code which could result in an attacker executing malicious code. IBM X-Force ID: 170046.

CNA Affected

[
  {
    "product": "Security Secret Server",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "10.7"
      }
    ]
  }
]

References

exchange.xforce.ibmcloud.com/vulnerabilities/170046

www.ibm.com/support/pages/node/2929923

CVSS3

4.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C

AI Score

8.9

Confidence

High

EPSS

0.002

Percentile

51.5%

JSON

Related for CVELIST:CVE-2019-4640