CVE-2019-4427

CVSS 5.9 MEDIUMEPSS 0.5%

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 5.9EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

12 fev 2020Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

IBM Cloud CLI 0.6.0 through 0.16.1 windows installers are signed using SHA1 certificate. An attacker might be able to exploit the weak algorithm to generate a installer with malicious software inside. IBM X-Force ID: 162773.

CVSS:3.0/AC:H/UI:N/C:H/I:N/AV:N/PR:N/A:N/S:U/E:U/RL:O/RC:C

Produtos afetados

IBM · Cloud CLI

Referências

https://exchange.xforce.ibmcloud.com/vulnerabilities/162773 https://www.ibm.com/support/pages/node/1356087