CVE-2019-20149: High severity ibm engineering workflow management (ewm) vulnerability
ctorName in index.js in kind-of v6.0.2 allows external user input to overwrite certain internal attributes via a conflicting name, as demonstrated by 'constructor': {'name':'Symbol'}. Hence, a crafted payload can overwrite this builtin attribute to manipulate the type detection result.
Other sources
kind-of could allow a remote attacker to bypass security restrictions, caused by improper validation of user supplied input in ctorName in index.js. By sending a specially-crafted payload, an attacker could exploit this vulnerability to overwrite the builtin attribute to manipulate the type detection result.
— IBM
Versions of kind-of 6.x prior to 6.0.3 are vulnerable to a Validation Bypass. A maliciously crafted object can alter the result of the type check, allowing attackers to bypass the type checking validation.
Recommendation
Upgrade to versions 6.0.3 or later.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2019-20149.
What is the severity of CVE-2019-20149?
The severity of CVE-2019-20149 is high (7.5).
Which software products are affected by CVE-2019-20149?
IBM EWM versions up to 7.0.2, IBM EWM versions up to 7.0.1, IBM RTC versions up to 6.0.2, IBM RTC versions up to 6.0.6.1, IBM RTC versions up to 6.0.6, IBM RELM versions up to 6.0.6.1, IBM RELM versions up to 6.0.6, IBM ENI versions up to 7.0.1, IBM ENI versions up to 7.0.2, and IBM Engineering Requirements Quality Assistant On-Premises (all versions) are affected.
How can a remote attacker exploit this vulnerability?
A remote attacker can exploit CVE-2019-20149 by sending a specially-crafted payload to overwrite the builtin attribute and manipulate the type detection.
Are there any references for CVE-2019-20149?
Yes, you can find references for CVE-2019-20149 at the following links: [GitHub Issue](https://github.com/jonschlinkert/kind-of/issues/30), [GitHub Pull Request](https://github.com/jonschlinkert/kind-of/pull/31), and [IBM X-Force Exchange](https://exchange.xforce.ibmcloud.com/vulnerabilities/173669).