PT-2019-16990 · Apache+1 · Zookeeper+1

Published 2019-12-10 · Updated 2019-12-13 · CVE-2019-4244

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions IBM SmartCloud Analytics versions 1.3.1 through 1.3.5

Description The issue allows a remote attacker to gain unauthorized information and unrestricted control over Zookeeper installations due to missing authentication.

Recommendations For IBM SmartCloud Analytics versions 1.3.1 through 1.3.5, consider implementing authentication mechanisms for Zookeeper installations to prevent unauthorized access until a patch is available.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2019-4244

Affected Products

Ibm Smartcloud Analytics

Zookeeper

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-4244 · Security Note
• https://osv.dev/vulnerability/CVE-2019-4244 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/159518 · Vendor Advisory
• https://ibm.com/support/pages/node/1127523 · Vendor Advisory