CVE-2019-4550
published 2020-02-04CVE-2019-4550: IBM Security Directory Server 6.4.0 is deployed with active debugging code that can create unintended entry points. IBM X-Force ID: 165952.
PriorityP425medium5.3CVSS 3.1
AVNACLPRNUINSUCLINAN
EPSS
1.07%
60.9th percentile
IBM Security Directory Server 6.4.0 is deployed with active debugging code that can create unintended entry points. IBM X-Force ID: 165952.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | tika | — | — |
| ibm | security_directory_server | — | — |
| ibm | security_directory_server | >= 6.4.0.0 < 6.4.0.20 | 6.4.0.20 |
CVSS provenance
nvdv3.15.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvdv3.05.3MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
vendor_apache8.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-43wr-5mwj-x7p2: IBM Security Directory Server 6
ghsa_unreviewed·2022-05-24
CVE-2019-4550 [MEDIUM] GHSA-43wr-5mwj-x7p2: IBM Security Directory Server 6
IBM Security Directory Server 6.4.0 is deployed with active debugging code that can create unintended entry points. IBM X-Force ID: 165952.
Apache
Apache tika: CVE-2019-10088
vendor_apache·CVSS 8.8
CVE-2019-10088 [HIGH] Apache tika: CVE-2019-10088
Apache tika: CVE-2019-10088
OOM from a crafted Zip File in Apache Tika's RecursiveParserWrapper RunningSnail 1.7-1.21 PDFBOX-4550 OOM from corrupt ToUnicode stream in PDFs Tilman Hausherr ?-1.21
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-02-04
Published