CVE-2019-4701: Medium severity ibm security guardium data encryption vulnerability

Q: What is the severity of CVE-2019-4701?

The severity of CVE-2019-4701 is medium with a CVSS score of 5.3.

Q: What is IBM Guardium Data Encryption (GDE)?

IBM Guardium Data Encryption (GDE) is a software solution provided by IBM for data protection and encryption.

Q: Which versions of IBM Guardium Data Encryption (GDE) are affected by CVE-2019-4701?

IBM Guardium Data Encryption (GDE) version 3.0.0.2 is affected by CVE-2019-4701.

Q: How can CVE-2019-4701 be exploited?

CVE-2019-4701 can be exploited by attackers leveraging the active debugging code in IBM Guardium Data Encryption (GDE) to create unintended entry points.

Q: Is there a fix available for CVE-2019-4701?

Yes, IBM has provided a fix for CVE-2019-4701. Please refer to the IBM support page for detailed instructions.

Published Aug 11, 2020

Updated

IBM Guardium Data Encryption (GDE) is deployed with active debugging code that can create unintended entry points.

Other sources

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 is deployed with active debugging code that can create unintended entry points. IBM X-Force ID: 171936.

Affected Software

3 affected components

IBM Guardium Data Encryption=3.0.0.2

IBM Guardium For Cloud Key Management<1.7.0

IBM GDE<=3.0.0.2

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6320817

Event History

Aug 11, 2020

CVE Published

via IBM·12:00 AM

Aug 26, 2020

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6320817

Frequently Asked Questions

What is the severity of CVE-2019-4701?

The severity of CVE-2019-4701 is medium with a CVSS score of 5.3.

What is IBM Guardium Data Encryption (GDE)?