CVE-2019-4427

2020-02-1216:15:11

Google

osv.dev

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

36.1%

JSON

IBM Cloud CLI 0.6.0 through 0.16.1 windows installers are signed using SHA1 certificate. An attacker might be able to exploit the weak algorithm to generate a installer with malicious software inside. IBM X-Force ID: 162773.

CPENameOperatorVersion
ibm-cloud-cli-releaseeq2.0.1
ibm-cloud-cli-releaseeq0.7.0
ibm-cloud-cli-releaseeq2.4.0
ibm-cloud-cli-releaseeq0.6.6
ibm-cloud-cli-releaseeq0.6.7
ibm-cloud-cli-releaseeq2.19.1
ibm-cloud-cli-releaseeq0.16.0
ibm-cloud-cli-releaseeq1.0.0
ibm-cloud-cli-releaseeq0.15.1
ibm-cloud-cli-releaseeq0.12.1

Name	Operator	Version
ibm-cloud-cli-release	eq	2.0.1
ibm-cloud-cli-release	eq	0.7.0
ibm-cloud-cli-release	eq	2.4.0
ibm-cloud-cli-release	eq	0.6.6
ibm-cloud-cli-release	eq	0.6.7
ibm-cloud-cli-release	eq	2.19.1
ibm-cloud-cli-release	eq	0.16.0
ibm-cloud-cli-release	eq	1.0.0
ibm-cloud-cli-release	eq	0.15.1
ibm-cloud-cli-release	eq	0.12.1