PT-2019-16914 · Ibm · Ibm Cloud Automation Manager

Published 2019-08-29 · Updated 2022-12-09 · CVE-2019-4133

Positive Technologies (AI Summary)

CVSS v3.1

5.2

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions IBM Cloud Automation Manager version 3.1.2

Description The issue allows a malicious user on the client side, with access to the client computer, to run a custom script.

Recommendations For IBM Cloud Automation Manager version 3.1.2, consider restricting access to the client computer to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2019-4133

Affected Products

Ibm Cloud Automation Manager

References · 4

• https://ibm.com/support/docview.wss?uid=ibm10967359 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-4133 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-4133 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/158278 · Vendor Advisory