Lucene search

IbmCVE-2019-4116

HistoryJul 25, 2019 - 3:15 p.m.

CVE-2019-4116

2019-07-2515:15:11

ibm

web.nvd.nist.gov

ibm

cloud

private

security

vulnerability

disclosure

information

logs

attack

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.1

Confidence

High

EPSS

Percentile

12.6%

JSON

IBM Cloud Private 2.1.0, 3.1.0, and 3.1.1 could disclose highly sensitive information in installer logs that could be use for further attacks against the system. IBM X-Force ID: 158115.

Affected configurations

Nvd

Vulners

Node

ibmcloud_privateMatch2.1.0

ibmcloud_privateMatch3.1.0

ibmcloud_privateMatch3.1.1

VendorProductVersionCPE
ibmcloud_private2.1.0cpe:2.3:a:ibm:cloud_private:2.1.0:*:*:*:*:*:*:*
ibmcloud_private3.1.0cpe:2.3:a:ibm:cloud_private:3.1.0:*:*:*:*:*:*:*
ibmcloud_private3.1.1cpe:2.3:a:ibm:cloud_private:3.1.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	cloud_private	2.1.0	cpe:2.3:a:ibm:cloud_private:2.1.0:::::::*
ibm	cloud_private	3.1.0	cpe:2.3:a:ibm:cloud_private:3.1.0:::::::*
ibm	cloud_private	3.1.1	cpe:2.3:a:ibm:cloud_private:3.1.1:::::::*

CNA Affected

[
  {
    "product": "Cloud Private",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "2.1.0"
      },
      {
        "status": "affected",
        "version": "3.1.0"
      },
      {
        "status": "affected",
        "version": "3.1.1"
      }
    ]
  }
]

References

www.ibm.com/support/docview.wss?uid=ibm10885318

exchange.xforce.ibmcloud.com/vulnerabilities/158115

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.1

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVE-2019-4116