Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBME97BC3D62F27454A2D367688620F1E59732C4FA0B1C4E85EE196731BFFB1EE13
HistoryJun 12, 2020 - 10:03 p.m.

Security Bulletin: Vulnerability in Go programming language affects IBM Spectrum Protect Server (CVE-2019-16276)

2020-06-1222:03:29
www.ibm.com
15

EPSS

0.012

Percentile

85.7%

JSON

Summary

The Go programming language could allow a remote attacker to bypass security restrictions which affects the IBM Spectrum Protect Server.

Vulnerability Details

CVEID:CVE-2019-16276
**DESCRIPTION:**Golang could allow a remote attacker to bypass security restrictions, caused by improper validation of HTTP header. By sending a specially-crafted request, an attacker could exploit this vulnerability to bypass filter or conduct HTTP request smuggling.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/167963 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)

Affected Products and Versions

Affected Product(s) Version(s)
IBM Spectrum Protect Server 8.1.0.000-8.1.9.300

Remediation/Fixes

Spectrum Protect Server Release First Fixing VRM Level Platform Link to Fix
8.1 8.1.10.000 AIX
Linux
Windows <http://www.ibm.com/support/pages/node/6229034&gt;

Workarounds and Mitigations

None

Related

debian 3
cve 1
nessus 29
amazon 5
veracode 1
openvas 11
redhatcve 1
ibm 5
altlinux 1
alpinelinux 1
prion 1
osv 7
freebsd 1
ubuntucve 1
cbl_mariner 1
redhat 3
symantec 1
fedora 4
debiancve 1
cvelist 1
nvd 1
checkpoint_advisories 1
suse 2
oraclelinux 4
threatpost 4
photon 5
debian
debian
[SECURITY] [DSA 4534-1] golang-1.11 security update
2019-09-27 20:36:57
[SECURITY] [DLA 2591-1] golang-1.7 security update
2021-03-13 18:37:17
[SECURITY] [DLA 2592-1] golang-1.8 security update
2021-03-13 18:37:54
cve
cve
CVE-2019-16276
2019-09-30 19:15:08
nessus
nessus
Amazon Linux 2 : golang (ALAS-2019-1335)
2019-10-25 00:00:00
Amazon Linux AMI : golang (ALAS-2019-1321)
2019-11-25 00:00:00
Debian DSA-4534-1 : golang-1.11 - security update
2019-09-30 00:00:00
amazon
amazon
Medium: golang
2019-10-21 18:01:00
Medium: golang
2019-11-19 17:31:00
Medium: golang
2020-01-14 18:15:00
veracode
veracode
HTTP Request Smuggling
2019-09-27 03:44:16
openvas
openvas
Debian: Security Advisory (DSA-4534-1)
2019-09-30 00:00:00
Fedora Update for golang FEDORA-2019-1b8cbd39ff
2020-01-09 00:00:00
openSUSE: Security Advisory for go1.12 (openSUSE-SU-2019:2522-1)
2020-01-09 00:00:00
redhatcve
redhatcve
CVE-2019-16276
2019-09-26 14:21:04
ibm
ibm
Security Bulletin: IBM Event Streams is affected by Go vulnerability CVE-2019-16276
2020-06-11 16:15:07
Security Bulletin: A Security Vulnerability affects IBM Cloud Private - Go (CVE-2019-16276)
2020-06-09 16:56:48
Security Bulletin: IBM API Connect is impacted by vulnerabilities in Golang (CVE-2019-17596 CVE-2019-16276)
2020-02-27 19:03:56
altlinux
altlinux
Security fix for the ALT Linux 10 package golang version 1.12.10-alt1
2019-10-10 00:00:00
alpinelinux
alpinelinux
CVE-2019-16276
2019-09-30 19:15:08
prion
prion
Design/Logic Flaw
2019-09-30 19:15:00
osv
osv
CVE-2019-16276
2019-09-30 19:15:08
golang-1.11 - security update
2019-09-27 00:00:00
Request smuggling due to accepting invalid headers in net/http via net/textproto
2022-05-23 22:46:20
freebsd
freebsd
go -- invalid headers are normalized, allowing request smuggling
2019-09-25 00:00:00
ubuntucve
ubuntucve
CVE-2019-16276
2019-09-30 00:00:00
cbl_mariner
cbl_mariner
CVE-2019-16276 affecting package python-tensorboard for versions less than 2.16.2-2
2024-07-24 01:44:36
redhat
redhat
(RHSA-2020:0652) Moderate: OpenShift Container Platform 4.2.21 openshift/installer security update
2020-03-05 20:08:21
(RHSA-2020:0101) Moderate: go-toolset-1.12-golang security update
2020-01-14 08:24:12
(RHSA-2020:0329) Moderate: go-toolset:rhel8 security update
2020-02-04 08:35:13
symantec
symantec
Golang Go CVE-2019-16276 HTTP Request Smuggling Vulnerability
2019-09-26 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: golang-1.13.1-1.fc31
2019-10-08 00:29:14
[SECURITY] Fedora 30 Update: golang-1.12.10-1.fc30
2019-10-09 16:54:30
[SECURITY] Fedora 30 Update: golang-1.12.13-1.fc30
2019-11-12 02:09:13
debiancve
debiancve
CVE-2019-16276
2019-09-30 19:15:08
cvelist
cvelist
CVE-2019-16276
2019-09-30 18:40:12
nvd
nvd
CVE-2019-16276
2019-09-30 19:15:08
checkpoint_advisories
checkpoint_advisories
Kubernetes Go Server Authentication Bypass (CVE-2019-16276)
2019-10-22 00:00:00
suse
suse
Security update for go1.12 (moderate)
2019-11-17 00:00:00
Security update for go1.12 (moderate)
2019-11-17 00:00:00
oraclelinux
oraclelinux
olcne kubernetes security update
2020-04-17 00:00:00
go-toolset:ol8 security update
2020-02-17 00:00:00
kubernetes security update
2020-01-31 00:00:00
threatpost
threatpost
ThreatList: One-Third of Firms Say Their Container Security Lags
2018-11-23 13:00:48
Public Bug Bounty Takes Aim at Kubernetes Container Project
2020-01-14 17:00:28
Dangerous Kubernetes Bugs Allow Authentication Bypass, DoS
2019-10-17 14:25:39
photon
photon
Critical Photon OS Security Update - PHSA-2019-0037
2019-11-01 00:00:00
Important Photon OS Security Update - PHSA-2019-3.0-0037
2019-10-31 00:00:00
Important Photon OS Security Update - PHSA-2020-0200
2020-01-14 00:00:00

EPSS

0.012

Percentile

85.7%

JSON
Related for E97BC3D62F27454A2D367688620F1E59732C4FA0B1C4E85EE196731BFFB1EE13
debian3cve1nessus29amazon5veracode1openvas11redhatcve1ibm5altlinux1alpinelinux1prion1osv7freebsd1ubuntucve1cbl_mariner1redhat3symantec1fedora4debiancve1cvelist1nvd1checkpoint_advisories1suse2oraclelinux4threatpost4photon5