CVE-2019-4338

moderate-risk
Published 2019-08-20

IBM Security Guardium Big Data Intelligence 4.0 (SonarG) does not properly restrict the size or amount of resources that are requested or influenced by an actor. This weakness can be used to consume more resources than intended. IBM X-Force ID: 161417.

Do I need to act?

-
0.45% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10 High
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Ibm

References (4)

Broken Link https://exchange.xforce.ibmcloud.com/vulnerabilities/161417
Vendor Advisory https://www.ibm.com/support/docview.wss?uid=ibm10960858
Broken Link https://exchange.xforce.ibmcloud.com/vulnerabilities/161417
Vendor Advisory https://www.ibm.com/support/docview.wss?uid=ibm10960858
33
/ 100
moderate-risk
Severity 26/34 · High
Exploitability 2/34 · Minimal
Exposure 5/34 · Minimal