CVE-2019-4539
7.1
CVSS:3.0/PR:L/A:H/I:L/AV:N/S:U/C:N/AC:L/UI:N/E:U/RC:C/RL:O
Summary
IBM Security Directory Server 6.4.0 does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the XML before it is processed by an end system. IBM X-Force ID: 165812.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| IBM | Security Directory Server | 6.4.0 | affected |
Weaknesses
- Denial of Service
ADP Enrichment
CVE Program Container
Additional References
- https://www.ibm.com/support/pages/node/1077045
- https://exchange.xforce.ibmcloud.com/vulnerabilities/165812
References
- https://www.ibm.com/support/pages/node/1077045
- https://exchange.xforce.ibmcloud.com/vulnerabilities/165812
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.