Unrated

IBM Cloud CLI 0.6.0 through 0.16.1 windows installers are signed using SHA1 certificate. An attacker might be able to exploit the weak algorithm to ge...

CVE-2019-4427 First seen on SecPulse Feb 13, 2020

Original description The description as published by the source.

IBM Cloud CLI 0.6.0 through 0.16.1 windows installers are signed using SHA1 certificate. An attacker might be able to exploit the weak algorithm to generate a installer with malicious software inside. IBM X-Force ID: 162773.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory exchange.xforce.ibmcloud.com
advisory ibm.com

Key facts

Severity: Unrated
Published: Feb 13, 2020
First seen on SecPulse: Feb 13, 2020

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:51