Security Bulletin: IBM InfoSphere Master Data Management Server vulnerability in OpenSSL

Summary

The vulnerability in CVE-2019-1552 has been addressed in the latest feature pack of MDM 11.6.0.11

Vulnerability Details

CVEID:CVE-2019-1552
**DESCRIPTION:**OpenSSL could allow a local attacker to bypass security restrictions, caused by the building of . mingw programs or Windows programs with world writable path defaults. An attacker could exploit this vulnerability to modify default configuration, insert CA certificates, modify (or even replace) existing engine modules.
CVSS Base score: 2.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/164498 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)

Affected Products and Versions

Remediation/Fixes

The vulnerability in CVE-2019-1552 has been addressed in the latest feature pack of MDM 11.6.0.11. Fix is to upgrade to latest feature pack for MDM 11.6

Workarounds and Mitigations

None