CVE-2019-4235

CWE-5213 documents3 sources
Severity
7.5HIGH
EPSS
0.3%
top 49.78%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Pureapplication System
Timeline
PublishedJun 26
Latest updateMay 24

Description

IBM PureApplication System 2.2.3.0 through 2.2.5.3 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 159417.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶NVDibm/pureapplication_system2.2.3.0 — 2.2.5.3
▶CVEListV5ibm/pureapplication_system8 versions+7

Patches

Patch: www-01.ibm.com ↗Patch: www-01.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-c54c-x29c-v3w9: IBM PureApplication System 2↗2022-05-24
▶
CVEList
CVE-2019-4235: IBM PureApplication System 2↗2019-06-26
▶
CVE-2019-4235 (HIGH CVSS 7.5) | IBM PureApplication System 2.2.3.0 | cvebase.io