Vulnerability Description
A IBM Spectrum Protect 7.l client backup or archive operation running for an HP-UX VxFS object is silently skipping Access Control List (ACL) entries from backup or archive if there are more than twelve ACL entries associated with the object in total. As a result, it could allow a local attacker to restore or retrieve the object with incorrect ACL entries. IBM X-Force ID: 159418.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Spectrum Protect | >= 7.1.0.0, <= 7.1.8.5 |
| Hp | Hp-Ux | - |
Related Weaknesses (CWE)
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/159418VDB EntryVendor Advisory
- https://www.ibm.com/support/docview.wss?uid=ibm10884766PatchVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/159418VDB EntryVendor Advisory
- https://www.ibm.com/support/docview.wss?uid=ibm10884766PatchVendor Advisory
FAQ
What is CVE-2019-4236?
CVE-2019-4236 is a vulnerability with a CVSS score of 4.4 (MEDIUM). A IBM Spectrum Protect 7.l client backup or archive operation running for an HP-UX VxFS object is silently skipping Access Control List (ACL) entries from backup or archive if there are more than twel...
How severe is CVE-2019-4236?
CVE-2019-4236 has been rated MEDIUM with a CVSS base score of 4.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-4236?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Spectrum Protect, Hp Hp-Ux.