Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBM8319CA9612B4DEC589C4853060BA2AF56F9542A115D7904A9DBA81DB4DD2043D
HistoryJul 20, 2022 - 4:24 p.m.

Security Bulletin: A security vulnerability has been fixed in IBM Security Identity Manager (CVE-2019-4451)

2022-07-2016:24:09
www.ibm.com
8

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

19.6%

JSON

Summary

A security vulnerability has been fixed in IBM Security Identity Manager 6.0.0

Vulnerability Details

CVEID:CVE-2019-4451
**DESCRIPTION:**IBM Security Identity Manager is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Base score: 5.4
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/163493 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)

Affected Products and Versions

Affected Product(s) Version(s)
ISIM 6.0.0

Remediation/Fixes

Affected Product / Version Fix availability
IBM Security Identity Manager 6.0.0 6.0.0.22-ISS-SIM-IF0002

Workarounds and Mitigations

None

Affected configurations

Vulners
Node
ibmsecurity_identity_managerMatch6.0.0
CPENameOperatorVersion
ibm security identity managereq6.0.0

Related

nvd 1
cve 1
prion 1
cvelist 1
nvd
nvd
CVE-2019-4451
2020-02-04 17:15:12
cve
cve
CVE-2019-4451
2020-02-04 17:15:12
prion
prion
Cross site scripting
2020-02-04 17:15:00
cvelist
cvelist
CVE-2019-4451
2020-02-03 00:00:00

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

19.6%

JSON
Related for 8319CA9612B4DEC589C4853060BA2AF56F9542A115D7904A9DBA81DB4DD2043D
nvd1cve1prion1cvelist1