IBMF7BEDAF8C9D9CA56CF39646FDE72AEACB1EC9C1177F6655AA0CA0AC6691BD3DDSecurity Bulletin: OpenSSL publicly disclosed vulnerability
0.001 Low
EPSS
Percentile
19.7%
Summary
IBM MobileFirst Platform Foundation has addressed the following vulnerability(ies) by updating the version of OpenSSL.
Vulnerability Details
CVEID:CVE-2019-1552
**DESCRIPTION:**OpenSSL could allow a local attacker to bypass security restrictions, caused by the building of . mingw programs or Windows programs with world writable path defaults. An attacker could exploit this vulnerability to modify default configuration, insert CA certificates, modify (or even replace) existing engine modules.
CVSS Base score: 2.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/164498 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| IBM MobileFirst Platform Foundation | 7.1.0.0 |
| IBM MobileFirst Foundation | 8.0.0.0 |
Remediation/Fixes
Published artifacts with the fix
iOS Native SDK - 8.0.2020021915
Android Native SDK - 8.0.2019103109
Cordova SDK - 8.0.2020022009
MF v7.1 - 7.1.0.0-IF202002241356
Workarounds and Mitigations
None
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm mobilefirst platform foundation | eq | 7.1.0.0 | |
| ibm mobilefirst platform foundation | eq | 8.0.0.0 |
Related
0.001 Low
EPSS
Percentile
19.7%