CVE-2019-4640

CVSS 4.4 MEDIUMEPSS 0.5%

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 4.4EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

19 feb 2020Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

IBM Security Secret Server 10.7 processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code which could result in an attacker executing malicious code. IBM X-Force ID: 170046.

CVSS:3.0/PR:H/A:N/S:U/UI:N/C:N/AC:H/AV:N/I:H/E:U/RC:C/RL:O

Productos afectados

IBM · Security Secret Server

Referencias

https://exchange.xforce.ibmcloud.com/vulnerabilities/170046 https://www.ibm.com/support/pages/node/2929923