{"id":"CVE-2019-4640","aliases":["EUVD-2019-14247","GHSA-ffg9-hxvw-8899"],"status":"published","title":"IBM Security Secret Server 10.7 processes patches, image backups and other updates without...","description":"IBM Security Secret Server 10.7 processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code which could result in an attacker executing malicious code. IBM X-Force ID: 170046.","severity":{"version":"3.0","score":4.4,"vector":"CVSS:3.0/PR:H/A:N/S:U/UI:N/C:N/AC:H/AV:N/I:H/E:U/RC:C/RL:O","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00523,"percentile":0.44669,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20","CWE-346"],"published":"2020-02-19T15:15:45Z","modified":"2026-06-17T02:36:45Z","products":[{"vendor":"ibm","product":"security secret server"},{"vendor":"ibm","product":"security_secret_server"}],"references":[{"url":"https://www.ibm.com/support/pages/node/2929923","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/170046","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-4640"},{"url":"https://github.com/advisories/GHSA-ffg9-hxvw-8899"}],"sources":{"cve":[{"id":"CVE-2019-4640","description":"IBM Security Secret Server 10.7 processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code which could result in an attacker executing malicious code. IBM X-Force ID: 170046.","status":"published","published":"2020-02-19T15:15:45.051Z","modified":"2024-09-17T02:01:41.833Z","cvss":[{"version":"3.0","score":4.4,"vector":"CVSS:3.0/PR:H/A:N/S:U/UI:N/C:N/AC:H/AV:N/I:H/E:U/RC:C/RL:O","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:20:24.989116Z"}],"euvd":[{"id":"EUVD-2019-14247","description":"IBM Security Secret Server 10.7 processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code which could result in an attacker executing malicious code. IBM X-Force ID: 170046.","status":"published","published":"2020-02-19T15:15:45Z","modified":"2024-09-17T02:01:41Z","cvss":[{"version":"3.0","score":4.4,"vector":"CVSS:3.0/PR:H/A:N/S:U/UI:N/C:N/AC:H/AV:N/I:H/E:U/RC:C/RL:O","level":"medium"}],"updated_at":"2026-11-03T00:28:44.385816Z"}],"ghsa":[{"id":"GHSA-ffg9-hxvw-8899","title":"IBM Security Secret Server 10.7 processes patches, image backups and other updates without...","description":"IBM Security Secret Server 10.7 processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code which could result in an attacker executing malicious code. IBM X-Force ID: 170046.","status":"published","published":"2022-05-24T17:09:20Z","modified":"2023-01-29T05:01:32Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:44:50.787695Z"}],"nvd":[{"id":"CVE-2019-4640","description":"IBM Security Secret Server 10.7 processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code which could result in an attacker executing malicious code. IBM X-Force ID: 170046.","status":"published","published":"2020-02-19T16:15:11.61Z","modified":"2026-06-17T02:36:45.017Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.0","score":4.4,"vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-346"],"updated_at":"2026-11-02T14:05:43.875329Z"}]}}