PT-2019-16991 · Ibm · Daeja Viewone Virtual

Published 2019-10-01 · Updated 2022-12-02 · CVE-2019-4246

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Daeja ViewONE Virtual versions 5.0 through 5.0.6

Description The issue could expose internal parameters to ViewONE clients, potentially allowing them to be used in further attacks against the system.

Recommendations For versions 5.0 through 5.0.6, update to a version that contains a fix for this issue to prevent internal parameters from being exposed to ViewONE clients.

Fix

Related Identifiers

CVE-2019-4246

Affected Products

Daeja Viewone Virtual

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-4246 · Security Note
• https://ibm.com/support/pages/node/884380 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/159521 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-4246 · Vendor Advisory