PT-2020-11000 · Ibm · Ibm Security Secret Server

Published 2020-01-28 · Updated 2020-01-30 · CVE-2019-4636

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Security Secret Server version 10.7

Description The issue could disclose sensitive information to an authenticated user from generated error messages.

Recommendations For IBM Security Secret Server version 10.7, update to a version that includes the fix for this issue to prevent sensitive information disclosure.

Fix

Generation of Error Message Containing Sensitive Information

Weakness Enumeration

CWE-209

Related Identifiers

CVE-2019-4636

Affected Products

Ibm Security Secret Server

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2019-4636 · Security Note
• https://ibm.com/support/pages/node/1283260 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/170013 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-4636 · Vendor Advisory
• https://t.me/cvenotify/554 · Telegram Post