{"id":"CVE-2019-4329","state":"PUBLISHED","title":"IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct","description":"IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 161209.","publishedAt":"2019-10-28T23:36:10.249Z","updatedAt":"2024-09-16T19:47:09.207Z","severity":{"score":4.3,"label":"Medium","version":"3.0","vector":"CVSS:3.0/AV:N/C:N/UI:N/A:N/AC:L/S:U/PR:L/I:L/RC:C/RL:O/E:U","source":"ibm"},"assigner":"ibm","products":["IBM Security Guardium Big Data Intelligence"],"affected":[{"vendor":"IBM","product":"Security Guardium Big Data Intelligence","versions":[{"version":"4","status":"affected"}]}],"references":["https://www.ibm.com/support/pages/node/1096906","https://exchange.xforce.ibmcloud.com/vulnerabilities/161209"],"weaknesses":[],"ingestedAt":"2026-10-29T19:46:01.452Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/4xxx/CVE-2019-4329.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-4329","state":"PUBLISHED","datePublished":"2019-10-28T23:36:10.249Z","dateUpdated":"2024-09-16T19:47:09.207Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2019-01-03T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 161209."}],"affected":[{"vendor":"IBM","product":"Security Guardium Big Data Intelligence","versions":[{"version":"4","status":"affected"}]}],"references":[{"url":"https://www.ibm.com/support/pages/node/1096906","tags":["x_refsource_CONFIRM"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/161209","name":"ibm-guardium-cve20194329-sec-bypass (161209)","tags":["vdb-entry","x_refsource_XF"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","exploitCodeMaturity":"UNPROVEN","integrityImpact":"LOW","privilegesRequired":"LOW","remediationLevel":"OFFICIAL_FIX","reportConfidence":"CONFIRMED","scope":"UNCHANGED","temporalScore":3.8,"temporalSeverity":"LOW","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/C:N/UI:N/A:N/AC:L/S:U/PR:L/I:L/RC:C/RL:O/E:U","version":"3.0"}}],"problemTypes":[{"descriptions":[{"description":"Bypass Security","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"ibm","dateUpdated":"2019-10-28T23:36:10.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522"},"datePublic":"2019-10-23T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","DATE_PUBLIC":"2019-10-23T00:00:00","ID":"CVE-2019-4329","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Security Guardium Big Data Intelligence","version":{"version_data":[{"version_value":"4"}]}}]},"vendor_name":"IBM"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 161209."}]},"impact":{"cvssv3":{"BM":{"A":"N","AC":"L","AV":"N","C":"N","I":"L","PR":"L","S":"U","UI":"N"},"TM":{"E":"U","RC":"C","RL":"O"}}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Bypass Security"}]}]},"references":{"reference_data":[{"name":"https://www.ibm.com/support/pages/node/1096906","refsource":"CONFIRM","title":"IBM Security Bulletin 1096906 (Security Guardium Big Data Intelligence)","url":"https://www.ibm.com/support/pages/node/1096906"},{"name":"ibm-guardium-cve20194329-sec-bypass (161209)","refsource":"XF","title":"X-Force Vulnerability Report","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/161209"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.ibm.com/support/pages/node/1096906","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/161209","name":"ibm-guardium-cve20194329-sec-bypass (161209)","tags":["vdb-entry","x_refsource_XF","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T19:33:37.922Z"}}]}}}