CVE-2019-4542: XSS

Published Oct 2, 2019

Updated

IBM Security Directory Server 6.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 165815.

Affected Software

1 affected component

IBM Security Directory Server=6.4.0

Remediation

Patch Available

https://www.ibm.com/support/pages/node/1077045

Event History

Oct 2, 2019

CVE Published

via MITRE·02:45 PM

Data Sourced

via MITRE·02:45 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID for this IBM Security Directory Server vulnerability?

The vulnerability ID for this IBM Security Directory Server vulnerability is CVE-2019-4542.

What is the severity of CVE-2019-4542?

The severity of CVE-2019-4542 is medium.

How does CVE-2019-4542 affect IBM Security Directory Server?

CVE-2019-4542 allows users to embed arbitrary JavaScript code in the Web UI of IBM Security Directory Server, potentially leading to credentials disclosure within a trusted session.

What is the Common Vulnerability and Exposures (CVE) ID for this vulnerability?

The Common Vulnerability and Exposures (CVE) ID for this vulnerability is CVE-2019-4542.

Is there a fix available for CVE-2019-4542?

No fix is currently available for CVE-2019-4542. It is recommended to apply appropriate mitigations to reduce the risk.