CVE-2019-4306 - IBM Security Guardium Big Data Intelligence (SonarG) 4.0 specifies permissions for a security-critical resource which could lead to the exposure of sensitive information or the modification of that resource by unintended parties

Back Back to CVE browser

MEDIUM

IBM Security Guardium Big Data Intelligence (SonarG) 4.0 specifies permissions for a security-critical resource which could lead to the exposure of sensitive information or the modification of that resource by unintended parties

Published Oct 28, 2019

6.5

MEDIUM

CVSS 3.1

EPSS 1.02%

Description

IBM Security Guardium Big Data Intelligence (SonarG) 4.0 specifies permissions for a security-critical resource which could lead to the exposure of sensitive information or the modification of that resource by unintended parties. IBM X-Force ID: 160986.

Affected products

Vendor IBM Product Security Guardium Big Data Intelligence Default
n/a
- Version
  4
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

Security Guardium Big Data Intelligence

n/a

Version	Status	Constraints
4	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-668

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-13913
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/160986
vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/1096396
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-13913		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/160986		vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/1096396		x_refsource_CONFIRMPatchVendor Advisory