Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBMF6B4DCC863A8C332BCD48A97AAC1C7A5048AA4A1477CDADEA165A9791212B112
HistoryMar 09, 2020 - 11:35 p.m.

Security Bulletin: Vulnerability in DCNM Network Management Software used by IBM c-type SAN directors and switches.

2020-03-0923:35:53
www.ibm.com
14

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:N/I:P/A:N

JSON

Summary

Public disclosed vulnerability from OpenSSL in DCNM Network Management Software used by IBM c-type SAN directors and switches.

Vulnerability Details

CVEID:CVE-2019-1552
**DESCRIPTION:**OpenSSL could allow a local attacker to bypass security restrictions, caused by the building of . mingw programs or Windows programs with world writable path defaults. An attacker could exploit this vulnerability to modify default configuration, insert CA certificates, modify (or even replace) existing engine modules.
CVSS Base score: 2.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/164498 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)

Affected Products and Versions

Affected Product(s) Version(s)
DCNM 11.1
DCNM 11.2
DCNM 11.3

Remediation/Fixes

Affected Product(s) Version(s)
DCNM 11.3(1)

Workarounds and Mitigations

None

CPENameOperatorVersion
cisco softwareeq11

Related

osv 1
ibm 26
ubuntucve 1
prion 1
openssl 1
openvas 21
nessus 19
cve 1
redhatcve 1
veracode 1
f5 1
debiancve 1
cert 1
pentestit 1
hackerone 2
altlinux 4
fedora 3
symantec 1
ics 1
oracle 5
osv
osv
CVE-2019-1552
2019-07-30 17:15:12
ibm
ibm
Security Bulletin: Aspera Web Faspex application is affected by OpenSSL Vulnerability (CVE-2019-1552)
2020-02-07 02:27:09
Security Bulletin: OpenSSL vulnerabilites (CVE-2019-1552) impacting IBM Aspera High-Speed Transfer Server, Aspera High-Speed Transfer Endpoint, Aspera Desktop 3.9.1 and earlier
2020-04-24 23:13:51
Security Bulletin: WebSphere MQ for HP NonStop Server is affected by OpenSSL vulnerability CVE-2019-1552
2020-01-14 15:56:21
ubuntucve
ubuntucve
CVE-2019-1552
2019-07-30 00:00:00
prion
prion
Default configuration
2019-07-30 17:15:00
openssl
openssl
Vulnerability in OpenSSL CVE-2019-1552
2019-07-30 00:00:00
openvas
openvas
OpenSSL Default Installation Paths Vulnerability (CVE-2019-1552) - Windows
2019-08-14 00:00:00
Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2019-2642)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for openssl1.1.0f (EulerOS-SA-2019-2005)
2020-01-23 00:00:00
nessus
nessus
EulerOS 2.0 SP3 : openssl1.1.0f (EulerOS-SA-2019-2005)
2019-09-24 00:00:00
EulerOS 2.0 SP3 : openssl (EulerOS-SA-2019-2642)
2019-12-18 00:00:00
EulerOS 2.0 SP2 : openssl110f (EulerOS-SA-2019-1862)
2019-09-17 00:00:00
cve
cve
CVE-2019-1552
2019-07-30 17:15:00
redhatcve
redhatcve
CVE-2019-1552
2019-08-26 14:59:31
veracode
veracode
Insecure Path Defaults
2019-07-31 07:19:43
f5
f5
K94041354 : OpenSSL vulnerability CVE-2019-1552
2019-10-07 00:00:00
debiancve
debiancve
CVE-2019-1552
2019-07-30 17:15:00
cert
cert
Veritas Backup Exec is vulnerable to privilege escalation due to OPENSSLDIR location
2020-12-23 00:00:00
pentestit
pentestit
UPDATE: Nmap 7.80
2019-08-12 21:59:41
hackerone
hackerone
curl: curl on Windows can be forced to execute code via OpenSSL environment variables
2019-10-14 23:02:51
Internet Bug Bounty: Windows builds with insecure path defaults (CVE-2019-1552)
2019-08-28 00:18:59
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl10 version 1.0.2u-alt1.p9.1
2020-12-10 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.1.1d-alt1
2019-09-19 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 1.0.2u-alt0.M80P.1
2020-12-11 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: compat-openssl10-1.0.2o-8.fc31
2019-09-21 00:04:14
[SECURITY] Fedora 29 Update: compat-openssl10-1.0.2o-7.fc29
2019-09-26 01:41:32
[SECURITY] Fedora 30 Update: compat-openssl10-1.0.2o-7.fc30
2019-09-25 01:08:23
symantec
symantec
OpenSSL Vulnerabilities Oct 2018 - Jul 2019
2019-09-05 08:00:00
ics
ics
Siemens SCALANCE X-200RNA Switch Devices
2022-12-19 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2019
2020-01-22 00:00:00
Oracle Critical Patch Update Advisory - January 2020
2020-01-14 00:00:00
Oracle Critical Patch Update Advisory - July 2020
2020-07-14 00:00:00

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:N/I:P/A:N

JSON
Related for F6B4DCC863A8C332BCD48A97AAC1C7A5048AA4A1477CDADEA165A9791212B112
osv1ibm26ubuntucve1prion1openssl1openvas21nessus19cve1redhatcve1veracode1f51debiancve1cert1pentestit1hackerone2altlinux4fedora3symantec1ics1oracle5