PT-2019-16989 · Ibm · Ibm Smartcloud Analytics

Published 2019-11-22 · Updated 2020-08-24 · CVE-2019-4243

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM SmartCloud Analytics versions 1.3.1 through 1.3.5

Description The issue allows unauthorized disclosure of information, such as accessing solrconfig.xml, which could enable an attacker to perform disruptive administrator tasks.

Recommendations For IBM SmartCloud Analytics versions 1.3.1 through 1.3.5, update to a version outside of the affected range to prevent unauthorized disclosure of information and potential disruptive administrator tasks.

Fix

Related Identifiers

CVE-2019-4243

Affected Products

Ibm Smartcloud Analytics

References · 4

• https://ibm.com/support/pages/node/1109721 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-4243 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/159517 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-4243 · Vendor Advisory