Vulnerability Description
IBM Security Identity Manager 6.0 and 7.0 could allow an attacker to create unexpected control flow paths through the application, potentially bypassing security checks. Exploitation of this weakness can result in a limited form of code injection. IBM X-Force ID: 156162.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Security Identity Manager | >= 6.0.0.0, <= 6.0.0.20 |
Related Weaknesses (CWE)
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/156162VDB EntryVendor Advisory
- https://www.ibm.com/support/docview.wss?uid=ibm10869604PatchVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/156162VDB EntryVendor Advisory
- https://www.ibm.com/support/docview.wss?uid=ibm10869604PatchVendor Advisory
FAQ
What is CVE-2019-4038?
CVE-2019-4038 is a vulnerability with a CVSS score of 6.2 (MEDIUM). IBM Security Identity Manager 6.0 and 7.0 could allow an attacker to create unexpected control flow paths through the application, potentially bypassing security checks. Exploitation of this weakness ...
How severe is CVE-2019-4038?
CVE-2019-4038 has been rated MEDIUM with a CVSS base score of 6.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-4038?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Security Identity Manager.