PT-2019-16999 · Ibm · Ibm Spectrum Scale

CVE-2019-4259 · Published 2019-05-13 · Updated 2023-01-30

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 4.1.1 through 5.0.0

Description A security issue has been identified that could allow sensitive data to be included with service snaps when the CES stack is enabled.

Recommendations For IBM Spectrum Scale versions 4.1.1 through 5.0.0, update to a version that includes the fix for this issue to prevent sensitive data from being exposed.

Fix

Related Identifiers

CVE-2019-4259

Affected Products

Ibm Spectrum Scale

References · 4

• https://ibm.com/support/docview.wss?uid=ibm10883568 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-4259 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/160011 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-4259 · Security Note