Lucene search
IBM63491DD97F4B72DF4482AA5603DAEAA0D11ECBD12741689992C14929BBC91CB7HistoryMar 02, 2020 - 4:44 p.m.
Security Bulletin: IBM MobileFirst Platform Foundation susceptible to privilege escalation on Android
2020-03-0216:44:29
www.ibm.com
10
0.005 Low
EPSS
Percentile
76.5%
Summary
IBM MobileFirst Platform Foundation has addressed the following vulnerability. The affected version of the InAppBrowser plugin has been upgraded.
Vulnerability Details
CVEID:CVE-2019-0219
**DESCRIPTION:**Apache Cordova could allow a remote attacker to gain elevated privileges on the system, caused by a flaw when using the InAppBrowser plugin. By using a specially-crafted gap-iab: URI, an attacker could exploit this vulnerability to gain elevated privileges.
CVSS Base score: 8.8
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/172296 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| IBM MobileFirst Platform Foundation | 7.1.0.0 |
Remediation/Fixes
| Product | VRMF | Remediation/First Fix |
|---|---|---|
| IBM MobileFirst Platform Foundation | 7.1.0.0 | Download the iFix from IBM MobileFirst Platform Foundation on FixCentral |
Workarounds and Mitigations
None
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm mobilefirst platform foundation | eq | 7.1.0.0 |
Related
cvelist
cvelist
CVE-2019-0219
2020-01-14 14:18:22
cve
cve
CVE-2019-0219
2020-01-14 15:15:12
nvd
nvd
CVE-2019-0219
2020-01-14 15:15:12
prion
prion
Code injection
2020-01-14 15:15:00
veracode
veracode
Privilege Escalation
2019-11-29 05:17:26
osv
osv
Privilege Escalation in cordova-plugin-inappbrowser
2020-09-04 17:57:43
github
github
Privilege Escalation in cordova-plugin-inappbrowser
2020-09-04 17:57:43
symantec
symantec
nodejs
nodejs
Privilege Escalation
2020-01-30 20:43:55
cnvd
cnvd
Apache Cordova Cross-Site Scripting Vulnerability
2022-04-22 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2022
2022-07-19 00:00:00
Oracle Critical Patch Update Advisory - July 2021
2021-07-20 00:00:00
Oracle Critical Patch Update Advisory - April 2021
2021-04-20 00:00:00
0.005 Low
EPSS
Percentile
76.5%
Related for 63491DD97F4B72DF4482AA5603DAEAA0D11ECBD12741689992C14929BBC91CB7