CVE-2019-4633

CWE-668 — Exposure to Wrong Sphere3 documents3 sources
Severity
4.3MEDIUM
EPSS
0.3%
top 48.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Security Secret Server
Timeline
PublishedJan 28
Latest updateMay 24

Description

IBM Security Secret Server 10.7 could allow an attacker to obtain sensitive information due to an overly permissive CORS policy. IBM X-Force ID: 170007.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶NVDibm/security_secret_server< 10.7.000059

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-pc93-vg6c-p2c9: IBM Security Secret Server 10↗2022-05-24
▶
CVEList
CVE-2019-4633: IBM Security Secret Server 10↗2020-01-28
▶
CVE-2019-4633 (MEDIUM CVSS 4.3) | IBM Security Secret Server 10.7 cou | cvebase.io