PT-2019-17074 · Ibm · Ibm Security Guardium

Ofra Shinitzky · Published 2019-10-03 · Updated 2022-12-07 · CVE-2019-4422

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Security Guardium versions 9.0, 9.5, and 10.6

Description The issue allows an authenticated user to potentially escalate privileges, which could enable them to change the accessmgr password.

Recommendations For IBM Security Guardium version 9.0, update to a version that includes a fix for this issue. For IBM Security Guardium version 9.5, update to a version that includes a fix for this issue. For IBM Security Guardium version 10.6, update to a version that includes a fix for this issue.

Fix

Related Identifiers

CVE-2019-4422

Affected Products

Ibm Security Guardium

References · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/162768 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-4422 · Vendor Advisory
• https://supportcontent.ibm.com/support/pages/node/957491 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-4422 · Security Note