VULNERABILITY INTELLIGENCE
CVE-2019-4338
CVSS score7.5 HIGH
EPSS probability1.73%
CISA KEVNot currently listed
Published2019-08-20
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
IBM Security Guardium Big Data Intelligence 4.0 (SonarG) does not properly restrict the size or amount of resources that are requested or influenced by an actor. This weakness can be used to consume more resources than intended. IBM X-Force ID: 161417.
Weakness classification
- CWE-770: Allocation of Resources Without Limits or Throttling
Primary references
- psirt@us.ibm.com — Broken Link, VDB Entry
- psirt@us.ibm.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory