CVE-2019-4220

MEDIUM

IBM InfoSphere Information Server 11.7.1.0 - Use of Hard-coded Encryption Key

Title source: llm

Description

IBM InfoSphere Information Server 11.7.1.0 stores a common hard coded encryption key that could be used to decrypt sensitive information. IBM X-Force ID: 159229.

References (2)

Core 2

Core References

Mitigation, Vendor Advisory x_refsource_confirm

https://www.ibm.com/support/docview.wss?uid=ibm10881197

VDB Entry, Vendor Advisory vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/159229

Scores

CVSS v3 5.5

EPSS 0.0021

EPSS Percentile 11.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-798

Status published

Products (2)

ibm/infosphere_information_server_on_cloud 11.7.1.0

ibm/watson_knowledge_catalog 11.7.1.0

Published Jun 06, 2019

Tracked Since Feb 18, 2026