PT-2020-11001 · Ibm · Ibm Security Secret Server

Published 2020-01-28 · Updated 2020-01-30 · CVE-2019-4637

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Security Secret Server version 10.7

Description The issue is related to incomplete blacklisting for input validation, allowing attackers to bypass application controls. This results in a direct impact to the system and data integrity.

Recommendations For IBM Security Secret Server version 10.7, consider implementing additional validation mechanisms to prevent attackers from bypassing application controls until a patch is available. As a temporary workaround, review and enhance the existing blacklisting rules to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2019-4637

Affected Products

Ibm Security Secret Server

References · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/170043 · Vendor Advisory
• https://ibm.com/support/pages/node/1283242 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-4637 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-4637 · Security Note
• https://t.me/cvenotify/555 · Telegram Post