Lucene search
IbmCVELIST:CVE-2019-4304HistorySep 30, 2019 - 3:20 p.m.
CVE-2019-4304
2019-09-3015:20:31
ibm
www.cve.org
15
CVSS3
6.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C
AI Score
6.5
Confidence
High
EPSS
0.001
Percentile
44.3%
IBM WebSphere Application Server - Liberty could allow a remote attacker to bypass security restrictions caused by improper session validation. IBM X-Force ID: 160950.
CNA Affected
[
{
"product": "WebSphere Application Server",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "Liberty"
}
]
}
]Related
ibm
ibm
Security Bulletin: IBM Cloud Private is vulnerable to an IBM WebSphere Application Server Liberty vulnerability (CVE-2019-4304)
2019-12-24 14:40:29
prion
prion
Authentication flaw
2019-09-30 16:15:00
cve
cve
CVE-2019-4304
2019-09-30 16:15:11
nvd
nvd
CVE-2019-4304
2019-09-30 16:15:11
CVSS3
6.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C
AI Score
6.5
Confidence
High
EPSS
0.001
Percentile
44.3%
Related for CVELIST:CVE-2019-4304