PT-2019-17061 · Ibm · Ibm Cloud Orchestrator+1

Publicado 2019-10-24 · Atualizado 2021-07-21 · CVE-2019-4398

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Baixa

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise versions 2.4 through 2.4.0.5 IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise versions 2.5 through 2.5.0.9

Description The issue allows a local user to obtain sensitive information from SessionManagement cookies.

Recommendations For versions 2.4 through 2.4.0.5, update to a version outside of this range to mitigate the risk. For versions 2.5 through 2.5.0.9, update to a version outside of this range to mitigate the risk.

Correção

Files Accessible to External Parties

Enumeração de Fraquezas

CWE-552

Identificadores relacionados

CVE-2019-4398

Produtos afetados

Ibm Cloud Orchestrator

Ibm Cloud Orchestrator Enterprise

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-4398 · Nota de Segurança
• https://ibm.com/support/pages/node/1077123 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/162259 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-4398 · Aviso do Fabricante