Skip to content
OpenAdvisories
Medium · 5.9 CVE-2019-4427 EUVD-2019-14034GHSA-qpf3-prqh-vf6g

IBM Cloud CLI 0.6.0 through 0.16.1 windows installers are signed using SHA1 certificate. An attacker might be able to exploit the weak algo…

Published Feb 12, 2020 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: Cloud CLI

Description

IBM Cloud CLI 0.6.0 through 0.16.1 windows installers are signed using SHA1 certificate. An attacker might be able to exploit the weak algorithm to generate a installer with malicious software inside. IBM X-Force ID: 162773.

Affected products

VendorProductAffectedFixed
IBM Cloud CLI 0.6.0, 0.16.1 —

References