Lucene search
IBM4C62C9C412367520EBBA205350CE53280086BEA8FCF28512639E7A442BE8CB52HistoryMay 08, 2019 - 8:55 p.m.
Security Bulletin: IBM DataPower Gateway is affected by a message spoofing vulnerability (CVE-2019-6110)
2019-05-0820:55:01
www.ibm.com
34
0.004 Low
EPSS
Percentile
74.4%
Summary
IBM DataPower Gateway has addressed the following vulnerability.
CVE-2019-6110
Vulnerability Details
CVEID:CVE-2019-6110
DESCRIPTION: OpenSSH could allow a remote attacker to conduct spoofing attacks, caused by accepting and displaying arbitrary stderr output from the scp server. A man-in-the-middle attacker could exploit this vulnerability to spoof scp client output.
CVSS Base Score: 3.1
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/155487> for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N)
Affected Products and Versions
| Affected IBM DataPower Gateway | Affected Versions |
|---|---|
| IBM DataPower Gateway | 7.5.2.0-7.5.2.19 |
| IBM DataPower Gateway | 7.6.0.0-7.6.0.13 |
| IBM DataPower Gateway | 7.7.0.0-2018.4.1.4 |
Remediation/Fixes
| Product | VRMF | APAR | Remediation / First Fix |
|---|---|---|---|
| IBM DataPower Gateway | 7.5.2.20 | IT28834 | Install the fix pack |
| IBM DataPower Gateway | 7.6.0.14 | IT28834 | Install the fix pack |
| IBM DataPower Gateway | 2018.4.1.5 | IT28834 | Install the fix pack |
Workarounds and Mitigations
None
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm datapower gateway | eq | any |
Related
f5
f5
K42531048 : OpenSSH vulnerability CVE-2019-6110
2019-01-17 00:00:00
K31781390 : January 2019 OpenSSH security vulnerabilities
2019-01-17 00:00:00
nessus
nessus
F5 Networks BIG-IP : OpenSSH vulnerability (K42531048)
2022-11-08 00:00:00
Photon OS 2.0: Openssh PHSA-2019-2.0-0165
2019-06-24 00:00:00
Photon OS 1.0: Openssh PHSA-2019-1.0-0237
2019-06-25 00:00:00
nvd
nvd
CVE-2019-6110
2019-01-31 18:29:00
debiancve
debiancve
CVE-2019-6110
2019-01-31 18:29:00
checkpoint_advisories
checkpoint_advisories
OpenSSH SCP Client Arbitrary File Download (CVE-2019-6110)
2019-03-12 00:00:00
prion
prion
Design/Logic Flaw
2019-01-31 18:29:00
ubuntucve
ubuntucve
CVE-2019-6110
2019-01-31 00:00:00
attackerkb
attackerkb
CVE-2019-6110
2019-01-31 00:00:00
ibm
ibm
cvelist
cvelist
CVE-2019-6110
2019-01-31 00:00:00
cve
cve
CVE-2019-6110
2019-01-31 18:29:00
redhatcve
redhatcve
CVE-2019-6110
2019-01-15 00:50:59
openvas
openvas
PuTTY SCP Multiple Spoofing Vulnerabilities - Windows
2019-01-17 00:00:00
SUSE: Security Advisory (SUSE-SU-2019:0126-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2019:0132-1)
2021-04-19 00:00:00
zdt
zdt
OpenSSH SCP Client - Write Arbitrary Files Exploit
2019-03-08 00:00:00
exploitpack
exploitpack
SCP Client - Multiple Vulnerabilities (SSHtranger Things)
2019-01-18 00:00:00
OpenSSH SCP Client - Write Arbitrary Files
2019-01-11 00:00:00
packetstorm
packetstorm
SSHtranger Things SCP Client File Issue
2019-01-18 00:00:00
exploitdb
exploitdb
SCP Client - Multiple Vulnerabilities (SSHtranger Things)
2019-01-18 00:00:00
OpenSSH SCP Client - Write Arbitrary Files
2019-01-11 00:00:00
suse
suse
Security update for openssh (important)
2019-01-28 00:00:00
Security update for openssh (important)
2019-01-29 00:00:00
gentoo
gentoo
OpenSSH: Multiple vulnerabilities
2019-03-20 00:00:00
thn
thn
36-Year-Old SCP Clients' Implementation Flaws Discovered
2019-01-15 12:32:00
symantec
symantec
OpenSSH Vulnerabilities Jan-Oct 2019
2020-04-21 20:41:25
photon
photon
Important Photon OS Security Update - PHSA-2019-0017
2019-06-06 00:00:00
Important Photon OS Security Update - PHSA-2019-3.0-0017
2019-06-06 00:00:00
aix
aix
Vulnerabilities in OpenSSH affect AIX.
2019-07-16 09:38:57
rosalinux
rosalinux
Advisory ROSA-SA-2021-1938
2021-07-02 17:38:20
ics
ics
Siemens SCALANCE X-200RNA Switch Devices
2022-12-19 12:00:00
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
avleonov
avleonov
0.004 Low
EPSS
Percentile
74.4%
Related for 4C62C9C412367520EBBA205350CE53280086BEA8FCF28512639E7A442BE8CB52