CVE-2019-4635: Command Injection

Q: What is the vulnerability ID of this issue?

The vulnerability ID is CVE-2019-4635.

Q: What is the title of this vulnerability?

The title of this vulnerability is 'IBM Security Secret Server could allow a privileged user to perform unauthorized command injection'.

Q: What is the severity of CVE-2019-4635?

The severity of CVE-2019-4635 is medium.

Q: How does CVE-2019-4635 occur?

CVE-2019-4635 occurs due to improper input neutralization of special elements in IBM Security Secret Server 10.7.

Q: How can I fix CVE-2019-4635?

To fix CVE-2019-4635, apply the necessary updates or patches provided by IBM Security Secret Server.

Published Jan 8, 2020

Updated

IBM Security Secret Server 10.7 could allow a privileged user to perform unauthorized command injection due to imporoper input neutralization of special elements. IBM X-Force ID: 170011.

Other sources

IBM Security Secret Server could allow a privileged user to perform unauthorized command injection due to imporoper input neutralization of special elements.

Affected Software

2 affected components

IBM Security Secret Server<10.7.000059

IBM Security Secret Server<=All

Remediation

Patch Available

https://www.ibm.com/support/pages/node/1283212

Event History

Jan 8, 2020

CVE Published

via IBM·12:00 AM

Jan 28, 2020

CVE Published

via MITRE·06:30 PM

Data Sourced

via MITRE·06:30 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-1283212

Frequently Asked Questions

What is the vulnerability ID of this issue?

The vulnerability ID is CVE-2019-4635.

What is the title of this vulnerability?