description: IBM Security Secret Server 10.7 processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code which could result in an attacker executing malicious code. IBM X-Force ID: 170046.
problem types: Gain Access
affected:
{
product: Security Secret Server
vendor: IBM
versions:
status: affected, version: 10.7
}
metrics:
cvssV3_0: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.4
baseSeverity: MEDIUM
confidentialityImpact: NONE
exploitCodeMaturity: UNPROVEN
integrityImpact: HIGH
privilegesRequired: HIGH
remediationLevel: OFFICIAL_FIX
reportConfidence: CONFIRMED
scope: UNCHANGED
temporalScore: 3.9
temporalSeverity: LOW
userInteraction: NONE
vectorString: CVSS:3.0/PR:H/A:N/S:U/UI:N/C:N/AC:H/AV:N/I:H/E:U/RC:C/RL:O
version: 3.0
]