CVE-2019-4165

概要

参考情報

• ibm.com/support/docview.wss · Patch
• exchange.xforce.ibmcloud.com/vulnerabilities/158698 · VDB Entry

storediq のその他の脆弱性

• CVE-2020-4224中 5.5IBM StoredIQ 7.6.0.17 through 7.6.0.20 could disclose sensitive information to a local user due to data in certain directories not being enc…
• CVE-2019-4167中 6.5IBM StoredIQ 7.6.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions t…
• CVE-2019-4163中 4.3IBM StoreIQ 7.6.0.0. through 7.6.0.18 could allow an authenticated user to obtain sensitive information that a privileged user should only b…
• CVE-2019-4166中 6.1IBM StoredIQ 7.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a…
• CVE-2018-1928中 5.5IBM StoredIQ 7.6.0 does not implement proper authorization of user roles due to which it was possible for a low privileged user to access th…