PT-2019-16910 · Ibm · Ibm Spectrum Protect Operations Center

Published 2019-07-02 · Updated 2022-12-09 · CVE-2019-4129

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect Operations Center versions 7.1 through 8.1

Description The issue allows a remote attacker to obtain sensitive information due to an error message containing a stack trace. By creating an error with a stack trace, an attacker could exploit this to potentially obtain details on the Operations Center architecture.

Recommendations For versions 7.1 through 8.1, consider disabling the display of detailed error messages as a temporary workaround until a patch is available. Restrict access to error messages containing stack traces to minimize the risk of exploitation.

Fix

Generation of Error Message Containing Sensitive Information

Weakness Enumeration

CWE-209

Related Identifiers

CVE-2019-4129

Affected Products

Ibm Spectrum Protect Operations Center

References · 4

• https://osv.dev/vulnerability/CVE-2019-4129 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/158279 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=ibm10883236 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-4129 · Security Note