CVE-2019-4338

Vulnerability

IBM Security Guardium Big Data Intelligence 4.0 (SonarG) does not properly restrict the size or amount of resources that are requested or influenced by an actor. This weakness can be used to consume more resources than intended, leading to denial of service. The vulnerability affects version 4.0 only [1].

Exploitation

An attacker can exploit this vulnerability remotely without authentication or user interaction. By sending crafted requests that consume excessive resources, the attacker can trigger resource exhaustion. No special network position or privileges are required [1].

Impact

Successful exploitation results in a denial of service condition, impacting the availability of the Guardium Big Data Intelligence service. There is no impact to confidentiality or integrity [1].

Mitigation

As of the publication date (August 16, 2019), IBM has not provided any remediation or fix in the available advisory. Users are advised to contact IBM support for guidance or monitor for future updates [1].