CVE-2019-4038

IBM Security Identity Manager 6.0 and 7.0 could allow an attacker to create unexpected control flow paths through the application, potentially bypassing…

High · published February 4, 2019

CVSS v3.0
7.2
EPSS
0%
Percentile
37.1
In the wild
Unconfirmed
What it is

IBM Security Identity Manager 6.0 and 7.0 could allow an attacker to create unexpected control flow paths through the application, potentially bypassing security checks. Exploitation of this weakness can result in a limited form of code injection. IBM X-Force ID: 156162.

The record
Technical detail
CVSS v3.0
7.2 · HIGH
Vector
CVSS:3.0/A:H/AC:L/AV:P/C:H/I:H/PR:H/S:C/UI:N/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.00439 · 37.1th percentile
Published
2019-02-04T21:00Z
EPSS history
Timeline
  • 04 FEB 21:00Z
    IBM Security Identity Manager 6.0 and 7.0 could allow an attacker to create unexpected control flow paths through the application, potentially bypassing…
    cvelistv5