CVE-2019-4633

MEDIUM 4.3CVE-2019-4633 · Published 28/01/2020 · updated 17/06/2026

In short

CVE-2019-4633 is a MEDIUM (CVSS 4.3) vulnerability affecting security secret server (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.92%, higher than 60.5% of all vulnerabilities.
Fix: update to 10.7.000059 or later.

Package	Affected versions	Patched versions
security secret server ibm	`< 10.7.000059`	`10.7.000059`

Description

IBM Security Secret Server 10.7 could allow an attacker to obtain sensitive information due to an overly permissive CORS policy. IBM X-Force ID: 170007.

References

exchange.xforce.ibmcloud.com/vulnerabilities/170007 · VDB Entry
ibm.com/support/pages/node/1283200 · Patch

More vulnerabilities in security secret server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

security secret server

ibm

< 10.7.000059

10.7.000059

More vulnerabilities in security secret server

See all →