CVEvulnerability
CVE-2019-4338
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-08-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-770
Description
IBM Security Guardium Big Data Intelligence 4.0 (SonarG) does not properly restrict the size or amount of resources that are requested or influenced by an actor. This weakness can be used to consume more resources than intended. IBM X-Force ID: 161417.
Affected configurations
• ibm security guardium big data intelligence 4.0
Related
Weakness · CWE (1)
- CWE-770 Allocation of Resources Without Limits or Throttling weakness
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/161417 Broken Link, VDB Entry
- https://www.ibm.com/support/docview.wss?uid=ibm10960858 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/161417 Broken Link, VDB Entry
- https://www.ibm.com/support/docview.wss?uid=ibm10960858 Vendor Advisory