PT-2020-10960 · Ibm · Ibm Security Directory Server

Published 2020-02-04 · Updated 2021-07-21 · CVE-2019-4541

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Security Directory Server version 6.4.0

Description The issue is related to incomplete blacklisting for input validation, allowing attackers to bypass application controls. This results in a direct impact to the system and data integrity.

Recommendations For IBM Security Directory Server version 6.4.0, consider implementing additional input validation mechanisms to prevent attackers from bypassing application controls until a patch is available. As a temporary workaround, review and enhance the existing blacklisting configuration to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2019-4541

Affected Products

Ibm Security Directory Server

References · 5

• https://ibm.com/support/pages/node/1288660 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-4541 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-4541 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/165814 · Note
• https://t.me/cvenotify/755 · Telegram Post