CVE-2019-4713

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 could allow a remote authenticated attacker to execute arbitrary commands on the system

High · published August 26, 2020

CVSS v3.0
8.8
EPSS
3%
Percentile
85.2
In the wild
Unconfirmed
What it is

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 172084.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/C:H/UI:N/A:H/AV:N/S:U/AC:L/I:H/PR:L/RL:O/RC:C/E:U
CVSS v4.0
Not supplied
EPSS
0.02604 · 85.2th percentile
Published
2020-08-26T19:00Z
EPSS history
Timeline
  • 26 AUG 19:00Z
    IBM Security Guardium Data Encryption (GDE) 3.0.0.2 could allow a remote authenticated attacker to execute arbitrary commands on the system
    cvelistv5