CVE-2019-4631: High severity ibm security secret server vulnerability
IBM Security Secret Server 10.7 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 170001.
Other sources
IBM Security Secret Server could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2019-4631.
What is the severity of CVE-2019-4631?
The severity of CVE-2019-4631 is high with a CVSS score of 7.4.
How does CVE-2019-4631 allow remote attackers to conduct phishing attacks?
CVE-2019-4631 allows remote attackers to conduct phishing attacks by using an open redirect vulnerability to spoof the URL displayed to redirect users to a malicious website.
Which version of IBM Security Secret Server is affected by CVE-2019-4631?
IBM Security Secret Server version 10.7 up to exclusive version 10.7.000059 is affected.
Is there a fix available for CVE-2019-4631?
Yes, IBM has provided a fix for CVE-2019-4631. Please refer to the IBM Security Secret Server support page for more details.