CVE-2019-4600
published 2019-10-29CVE-2019-4600: IBM API Connect version V5.0.0.0 through 5.0.8.7 could reveal sensitive information to an attacker using a specially crafted HTTP request. IBM X-Force ID…
PriorityP428medium5.3CVSS 3.1
AVNACLPRNUINSUCLINAN
EPSS
1.43%
69.8th percentile
IBM API Connect version V5.0.0.0 through 5.0.8.7 could reveal sensitive information to an attacker using a specially crafted HTTP request. IBM X-Force ID: 167883.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | api_connect | — | — |
| ibm | api_connect | — | — |
| ibm | api_connect | 5.0.0.0 – 5.0.8.7 | — |
| netty | netty | >= 0 < 1:4.1.7-4ubuntu0.1 | 1:4.1.7-4ubuntu0.1 |
CVSS provenance
nvdv3.15.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvdv3.05.3MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
osv7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-jxcg-m2hj-vfw2: IBM API Connect version V5
ghsa_unreviewed·2022-05-24
CVE-2019-4600 [MEDIUM] GHSA-jxcg-m2hj-vfw2: IBM API Connect version V5
IBM API Connect version V5.0.0.0 through 5.0.8.7 could reveal sensitive information to an attacker using a specially crafted HTTP request. IBM X-Force ID: 167883.
OSV
netty vulnerabilities
osv·2020-10-27·CVSS 7.5
CVE-2019-20444 netty vulnerabilities
netty vulnerabilities
USN-4600-1 fixed multiple vunerabilities in Netty 3.9. This update provides
the corresponding fixes for CVE-2019-20444, CVE-2019-20445 for Netty.
Also it was discovered that Netty allow for unbounded memory allocation. A
remote attacker could send a large stream to the Netty server causing it to
crash (denial of service). (CVE-2020-11612)
Original advisory details:
It was discovered that Netty had HTTP request smuggling vulnerabilities. A
remote attacker could used it to extract sensitive information. (CVE-2019-16869,
CVE-2019-20444, CVE-2019-20445, CVE-2020-7238)
No detection rules found.
Nuclei
SonicWall SRA 4600 VPN - SQL Injection
nuclei·CVSS 7.5
CVE-2019-7481 [HIGH] SonicWall SRA 4600 VPN - SQL Injection
SonicWall SRA 4600 VPN - SQL Injection
The SonicWall SRA 4600 VPN appliance is susceptible to a pre-authentication SQL injection vulnerability.
Template:
id: CVE-2019-7481
info:
name: SonicWall SRA 4600 VPN - SQL Injection
author: _darrenmartyn
severity: high
description: The SonicWall SRA 4600 VPN appliance is susceptible to a pre-authentication SQL injection vulnerability.
impact: |
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL commands, potentially leading to unauthorized access, data leakage, or denial of service.
remediation: |
Apply the latest security patches or firmware updates provided by SonicWall to mitigate this vulnerability.
reference:
- https://www.crowdstrike.com/blog/how-ecrime-groups-leverage-sonicwall-vulnerability-cve
No writeups or analysis indexed.
2019-10-29
Published