CVE-2019-4640

IBM Security Secret Server (all versions) is affected by CVE-2019-4640 due to processing patches, image backups and other updates without proper verification of origin/integrity, which could allow execution of malicious code. The IBM security bulletin confirms the issue and provides a remediation...

Security Bulletin: A Security Vulnerability Has Been Identified In IBM Security Secret Server (CVE-2019-4640)

Summary A security vulnerability identified on IBM Security Secret Server has been addressed in the release 10.7.000059. Vulnerability Details CVEID: CVE-2019-4640 DESCRIPTION: IBM Security Secret Server processes patches, image backups and other updates without sufficiently verifying the origin...