CVE-2019-4640 IBM Security Secret Server 10.7 processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code which could result in an attacker executing malic...
CriticalCVSS 9.8
EPSS 0.52%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM Security Secret Server 10.7 processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code which could result in an attacker executing malicious code. IBM X-Force ID: 170046.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm security secret server | All versions | No fix listed |
| ibm security secret server | = 10.7 | No fix listed |
References
- ibm-sss-cve20194640-code-exec (170046) vdb-entry vendor-advisory
- www.ibm.com vendor-advisory