PT-2019-17122 · Ibm · Ibm Security Directory Server

Published 2019-10-02 · Updated 2022-12-07 · CVE-2019-4539

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions IBM Security Directory Server version 6.4.0

Description The issue allows attackers to modify the syntax, content, or commands of the XML before it is processed by an end system, due to the improper neutralization of special elements used in XML.

Recommendations For IBM Security Directory Server version 6.4.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-91

Related Identifiers

CVE-2019-4539

Affected Products

Ibm Security Directory Server

References · 5

• https://ibm.com/support/pages/node/1077045 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-4539 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/165812 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-4539 · Security Note
• https://t.me/cvenotify/39370 · Telegram Post