CVEvulnerability
CVE-2019-4329
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-10-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
- CVSS 3.0 ([email protected])
- 4.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
Description
IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 161209.
Affected configurations
• ibm security guardium big data intelligence 4.0
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/161209 VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/1096906 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/161209 VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/1096906 Patch, Vendor Advisory