What is the severity of CVE-2019-4652?

CVE-2019-4652 is considered a medium severity vulnerability due to the potential for unauthorized access to sensitive information.

How do I fix CVE-2019-4652?

To fix CVE-2019-4652, you should upgrade IBM Spectrum Protect Plus to version 10.1.5 or later, where the insecure file permission issue is resolved.

Which versions of IBM Spectrum Protect Plus are affected by CVE-2019-4652?

CVE-2019-4652 affects IBM Spectrum Protect Plus versions 10.1.0 through 10.1.4.

Is there a workaround for CVE-2019-4652 if I cannot upgrade?

A potential workaround for CVE-2019-4652 is to manually adjust the file permissions on restored files to restrict access until an upgrade is possible.

Vulnerability/
CVE-2019-4652

high

7.1

CWE

276

11/11/2019

12/11/2019

16/9/2024

CVE-2019-4652

Q: What impact does CVE-2019-4652 have on IBM Spectrum Protect Plus?

CVE-2019-4652 allows local users to exploit insecure file permissions on restored files and directories, potentially leading to unauthorized actions.

First published: Mon Nov 11 2019(Updated: )

IBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files and directories in Windows which could allow a local user to obtain sensitive information or perform unauthorized actions. IBM X-Force ID: 170963.

Credit: psirt@us.ibm.com

Affected Software	Affected Version	How to fix
IBM Spectrum Protect Plus	<=10.1.0-10.1.4
IBM Spectrum Protect Plus	>=10.1.0<=10.1.4
Linux Kernel

Never miss a vulnerability like this again

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

IBM-1105683

Frequently Asked Questions

What is the severity of CVE-2019-4652?
CVE-2019-4652 is considered a medium severity vulnerability due to the potential for unauthorized access to sensitive information.
How do I fix CVE-2019-4652?
To fix CVE-2019-4652, you should upgrade IBM Spectrum Protect Plus to version 10.1.5 or later, where the insecure file permission issue is resolved.
What impact does CVE-2019-4652 have on IBM Spectrum Protect Plus?
CVE-2019-4652 allows local users to exploit insecure file permissions on restored files and directories, potentially leading to unauthorized actions.
Which versions of IBM Spectrum Protect Plus are affected by CVE-2019-4652?
CVE-2019-4652 affects IBM Spectrum Protect Plus versions 10.1.0 through 10.1.4.
Is there a workaround for CVE-2019-4652 if I cannot upgrade?
A potential workaround for CVE-2019-4652 is to manually adjust the file permissions on restored files to restrict access until an upgrade is possible.

agent/references
agent/type
agent/first-publish-date
agent/weakness
agent/author
agent/severity
agent/description
agent/softwarecombine
collector/ibm-support
source/IBM
agent/software-canonical-lookup
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/event
agent/trending
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/ibm
canonical/ibm spectrum protect plus
version/ibm spectrum protect plus/10.1.0-10.1.4
version/ibm spectrum protect plus/10.1.0
version/ibm spectrum protect plus/10.1.4
vendor/linux
canonical/linux kernel

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.