CVE-2019-4702

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 specifies permissions for a security-critical resource in a way that allows that resource to be read or…

Medium · published January 13, 2021

CVSS v3.0
4.2
EPSS
0%
Percentile
36.6
In the wild
Unconfirmed
What it is

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

The record
Technical detail
CVSS v3.0
4.2 · MEDIUM
Vector
CVSS:3.0/AV:N/PR:L/I:L/UI:N/S:U/A:N/AC:H/C:L/RC:C/E:U/RL:O
CVSS v4.0
Not supplied
EPSS
0.00433 · 36.6th percentile
Published
2021-01-13T17:40Z
EPSS history
Timeline
  • 13 JAN 17:40Z
    IBM Security Guardium Data Encryption (GDE) 3.0.0.2 specifies permissions for a security-critical resource in a way that allows that resource to be read or…
    cvelistv5