CVE-2019-4259: Medium severity IBM Spectrum Scale vulnerability

Q: What is the severity of CVE-2019-4259?

The severity of CVE-2019-4259 is medium with a severity value of 5.5.

Q: Which versions of IBM Spectrum Scale are affected by CVE-2019-4259?

IBM Spectrum Scale versions 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 are affected by CVE-2019-4259.

Q: What is the vulnerability in IBM Spectrum Scale related to CVE-2019-4259?

The vulnerability in IBM Spectrum Scale related to CVE-2019-4259 is the inclusion of sensitive data with service snaps when CES stack is enabled.

Q: How can I fix the vulnerability in IBM Spectrum Scale CVE-2019-4259?

To fix the vulnerability, IBM recommends upgrading to a fixed version of IBM Spectrum Scale or applying the necessary patch.

Q: Where can I find more information about CVE-2019-4259?

More information about CVE-2019-4259 can be found in the IBM X-Force ID: 160011 and the IBM support documentation.

Published May 13, 2019

Updated

A security vulnerability has been identified in IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 with CES stack enabled that could allow sensitive data to be included with service snaps. IBM X-Force ID: 160011.

Affected Software

3 affected components

IBM Spectrum Scale>=4.1.1.0<=4.1.1.22

IBM Spectrum Scale>=4.2.0.0<=4.2.3.13

IBM Spectrum Scale>=5.0.0.0<=5.0.2.3

Event History

May 13, 2019

CVE Published

via MITRE·03:55 PM

Data Sourced

via MITRE·03:55 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2019-4259?

The severity of CVE-2019-4259 is medium with a severity value of 5.5.

Which versions of IBM Spectrum Scale are affected by CVE-2019-4259?

IBM Spectrum Scale versions 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 are affected by CVE-2019-4259.

What is the vulnerability in IBM Spectrum Scale related to CVE-2019-4259?