Vulnerability Description
An issue was discovered in Dillon Kane Tidal Workload Automation Agent 3.2.0.5 (formerly known as Cisco Workload Automation or CWA). The Enterprise Scheduler for AIX allows local users to gain privileges via Command Injection in crafted Tidal Job Buffers (TJB) parameters. NOTE: this vulnerability exists because the CVE-2014-3272 solution did not address AIX operating systems.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dillonkane | Tidal Workload Automation | 3.2.0.5 |
Related Weaknesses (CWE)
References
- https://ashsecurity.wordpress.com/2019/04/25/an-improper-cisco-fix-for-cve-2014-Third Party Advisory
- https://ashsecurity.wordpress.com/2019/04/25/an-improper-cisco-fix-for-cve-2014-Third Party Advisory
FAQ
What is CVE-2019-6689?
CVE-2019-6689 is a vulnerability with a CVSS score of 7.8 (HIGH). An issue was discovered in Dillon Kane Tidal Workload Automation Agent 3.2.0.5 (formerly known as Cisco Workload Automation or CWA). The Enterprise Scheduler for AIX allows local users to gain privile...
How severe is CVE-2019-6689?
CVE-2019-6689 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-6689?
Check the references section above for vendor advisories and patch information. Affected products include: Dillonkane Tidal Workload Automation.