CVE-2019-4579 — IBM Resilient Soar vulnerability

3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.1%
top 67.09%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Resilient SoarIBM Resilient Security Orchestration Automation AND Response
Timeline
PublishedAug 28
Latest updateMay 24

Description

IBM Resilient SOAR 38 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 167236.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5ibm/resilient_soar38

🔴Vulnerability Details

2
GHSA
GHSA-3j4f-9mvw-3h5f: IBM Resilient SOAR 38 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impa↗2022-05-24
▶
CVEList
CVE-2019-4579: IBM Resilient SOAR 38 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impa↗2020-08-28
▶
CVE-2019-4579 — IBM Resilient Soar vulnerability | cvebase