PT-2019-16942 · Ibm · Ibm Storediq

Published 2019-07-31 · Updated 2022-12-09 · CVE-2019-4163

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM StoreIQ versions 7.6.0.0 through 7.6.0.18

Description The issue allows an authenticated user to obtain sensitive information that should only be accessible to privileged users.

Recommendations For IBM StoreIQ versions 7.6.0.0 through 7.6.0.18, update to a version that contains a fix for this issue, as no specific workaround or mitigation is provided in the available data. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2019-4163

Affected Products

Ibm Storediq

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-4163 · Security Note
• http://ibm.com/support/docview.wss?uid=ibm10960009 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/158696 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-4163 · Vendor Advisory