CVE-2019-4427

IBM Cloud CLI 0.6.0 through 0.16.1 windows installers are signed using SHA1 certificate

Medium · published February 12, 2020

CVSS v3.0
5.9
EPSS
0%
Percentile
41.0
In the wild
Unconfirmed
What it is

IBM Cloud CLI 0.6.0 through 0.16.1 windows installers are signed using SHA1 certificate. An attacker might be able to exploit the weak algorithm to generate a installer with malicious software inside. IBM X-Force ID: 162773.

The record
Technical detail
CVSS v3.0
5.9 · MEDIUM
Vector
CVSS:3.0/AC:H/UI:N/C:H/I:N/AV:N/PR:N/A:N/S:U/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00488 · 41.0th percentile
Published
2020-02-12T16:10Z
EPSS history
Timeline
  • 12 FEB 16:10Z
    IBM Cloud CLI 0.6.0 through 0.16.1 windows installers are signed using SHA1 certificate
    cvelistv5