PT-2019-16978 · Ibm · Ibm Pureapplication System

Published 2019-06-26 · Updated 2023-02-03 · CVE-2019-4225

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM PureApplication System versions 2.2.3.0 through 2.2.5.3

Description The issue allows potentially sensitive information to be stored in log files, which could be accessed by a local user.

Recommendations For versions 2.2.3.0 through 2.2.5.3, consider restricting access to log files to minimize the risk of sensitive information disclosure.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2019-4225

Affected Products

Ibm Pureapplication System

References · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/159242 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-4225 · Vendor Advisory
• https://www-01.ibm.com/support/docview.wss?uid=ibm10885602 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-4225 · Security Note