CVE-2019-4702: High severity IBM Security Guardium Data Encrpytion vulnerability
IBM Guardium Data Encryption (GDE) specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
Other sources
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2019-4702.
What is the severity of CVE-2019-4702?
The severity of CVE-2019-4702 is high, with a severity value of 8.1.
Which software is affected by CVE-2019-4702?
IBM Guardium Data Encryption (GDE) version 3.0.0.2 is affected by CVE-2019-4702.
What is the risk of CVE-2019-4702?
CVE-2019-4702 allows unintended actors to read or modify a security-critical resource, posing a significant risk to the affected system.
Is there a fix available for CVE-2019-4702?
To fix CVE-2019-4702, it is recommended to update IBM Guardium Data Encryption (GDE) to a version that is not affected by this vulnerability.