PT-2020-10974
CVE-2019-4579
·
Published
2020-08-28
·
Updated
2020-09-03
Description by
CVSS 3.1
4.3
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
IBM Resilient SOAR version 38
Description
The issue is related to incomplete blacklisting for input validation, which allows attackers to bypass application controls. This results in a direct impact to the system and data integrity.
Recommendations
For IBM Resilient SOAR version 38, consider implementing additional input validation mechanisms to prevent attackers from bypassing application controls. As a temporary workaround, review and enhance the existing blacklisting rules to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾