CVE-2019-4161

CVSS 4 MEDIUMEPSS 0.3%

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 4EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

06 Jun 2019Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 158660.

CVSS:3.0/I:N/PR:N/AV:L/AC:L/S:U/UI:N/A:N/C:L/RC:C/E:U/RL:O

Affected products

IBM · Security Information Queue

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/158660 https://www.ibm.com/support/docview.wss?uid=ibm10885959