CVE-2019-4400

CVE-2019-4400 is a path traversal in IBM Cloud Orchestrator affecting IBM Cloud Orchestrator and Enterprise Editions: versions 2.4 (including 2.4.0.1–2.4.0.5) and 2.5 (including 2.5.0.1–2.5.0.9). A remote attacker could use /../ sequences in a crafted URL to view arbitrary files. Remediation prov...

Security Bulletin: A security vulnerability affects IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise Edition (CVE-2019-4400)

Summary IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise has identified and addressed the path traversal vulnerability. Vulnerability Details CVEID: CVE-2019-4400 DESCRIPTION: IBM Cloud Orchestrator could allow a remote attacker to traverse directories on the system. An attacker could...