Lucene search

K
cvelistIbmCVELIST:CVE-2019-4381
HistoryJun 14, 2019 - 2:45 p.m.

CVE-2019-4381

2019-06-1414:45:18
ibm
www.cve.org
4

CVSS3

5.9

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C

EPSS

0

Percentile

5.1%

IBM i 7.27.3 Clustering could allow a local attacker to obtain sensitive information, caused by the use of advanced node failure detection using the REST API to interface with the HMC. An attacker could exploit this vulnerability to obtain HMC credentials. IBM X-Force ID: 162159.

CNA Affected

[
  {
    "product": "i",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.27.3"
      }
    ]
  }
]

CVSS3

5.9

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C

EPSS

0

Percentile

5.1%

Related for CVELIST:CVE-2019-4381