{"id":"CVE-2019-4640","state":"PUBLISHED","title":"IBM Security Secret Server 10.7 processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code which could result in an atta","description":"IBM Security Secret Server 10.7 processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code which could result in an attacker executing malicious code. IBM X-Force ID: 170046.","publishedAt":"2020-02-19T15:15:45.051Z","updatedAt":"2024-09-17T02:01:41.833Z","severity":{"score":4.4,"label":"Medium","version":"3.0","vector":"CVSS:3.0/PR:H/A:N/S:U/UI:N/C:N/AC:H/AV:N/I:H/E:U/RC:C/RL:O","source":"ibm"},"assigner":"ibm","products":["IBM Security Secret Server"],"affected":[{"vendor":"IBM","product":"Security Secret Server","versions":[{"version":"10.7","status":"affected"}]}],"references":["https://www.ibm.com/support/pages/node/2929923","https://exchange.xforce.ibmcloud.com/vulnerabilities/170046"],"weaknesses":[],"ingestedAt":"2026-10-29T19:46:01.452Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/4xxx/CVE-2019-4640.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-4640","state":"PUBLISHED","datePublished":"2020-02-19T15:15:45.051Z","dateUpdated":"2024-09-17T02:01:41.833Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2019-01-03T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"IBM Security Secret Server 10.7 processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code which could result in an attacker executing malicious code. IBM X-Force ID: 170046."}],"affected":[{"vendor":"IBM","product":"Security Secret Server","versions":[{"version":"10.7","status":"affected"}]}],"references":[{"url":"https://www.ibm.com/support/pages/node/2929923","tags":["x_refsource_CONFIRM"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/170046","name":"ibm-sss-cve20194640-code-exec (170046)","tags":["vdb-entry","x_refsource_XF"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.4,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","exploitCodeMaturity":"UNPROVEN","integrityImpact":"HIGH","privilegesRequired":"HIGH","remediationLevel":"OFFICIAL_FIX","reportConfidence":"CONFIRMED","scope":"UNCHANGED","temporalScore":3.9,"temporalSeverity":"LOW","userInteraction":"NONE","vectorString":"CVSS:3.0/PR:H/A:N/S:U/UI:N/C:N/AC:H/AV:N/I:H/E:U/RC:C/RL:O","version":"3.0"}}],"problemTypes":[{"descriptions":[{"description":"Gain Access","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"ibm","dateUpdated":"2020-02-19T15:15:44.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522"},"datePublic":"2020-02-18T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","DATE_PUBLIC":"2020-02-18T00:00:00","ID":"CVE-2019-4640","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Security Secret Server","version":{"version_data":[{"version_value":"10.7"}]}}]},"vendor_name":"IBM"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"IBM Security Secret Server 10.7 processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code which could result in an attacker executing malicious code. IBM X-Force ID: 170046."}]},"impact":{"cvssv3":{"BM":{"A":"N","AC":"H","AV":"N","C":"N","I":"H","PR":"H","S":"U","UI":"N"},"TM":{"E":"U","RC":"C","RL":"O"}}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Gain Access"}]}]},"references":{"reference_data":[{"name":"https://www.ibm.com/support/pages/node/2929923","refsource":"CONFIRM","title":"IBM Security Bulletin 2929923 (Security Secret Server)","url":"https://www.ibm.com/support/pages/node/2929923"},{"name":"ibm-sss-cve20194640-code-exec (170046)","refsource":"XF","title":"X-Force Vulnerability Report","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/170046"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.ibm.com/support/pages/node/2929923","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/170046","name":"ibm-sss-cve20194640-code-exec (170046)","tags":["vdb-entry","x_refsource_XF","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T19:40:48.139Z"}}]}}}