CVE-2019-4552 is a medium-severity HTTP response splitting vulnerability affecting IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0. An unauthenticated attacker could exploit this by tricking a user into clicking a specially crafted URL, leading to web cache poisoning, cross-site scripting, or information disclosure. While the CVSS score is 6.1, there is no known exploit code, active exploitation, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 9.0.7.0, < 9.0.7.2CPE matchmatch criteria | cpe:2.3:a:ibm:security_access_manager:*:*:*:*:*:*:*:* | ||
>= 10.0.0, < 10.0.0.1CPE matchmatch criteria | cpe:2.3:a:ibm:security_verify_access:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.