CVE-2019-4284

CVE-2019-4284 affects IBM Cloud Private. The vulnerability allows a local privileged user to obtain a sensitive OIDC token that is printed to log files, enabling authentication as another user. Affected versions: IBM Cloud Private 2.1.x, 3.1.0, 3.1.1, 3.1.2. Root cause: leakage of OIDC tokens via...

CVE-2019-4284: Insertion of Sensitive Information into Log File

IBM Cloud Private 2.1.0 , 3.1.0, 3.1.1, and 3.1.2 could allow a local privileged user to obtain sensitive OIDC token that is printed to log files, which could be used to log in to the system as another user. IBM X-Force ID: 160512...

CVE-2026-45069: OidcTokenHandler Accepts JWTs Missing aud/iss/exp Claims

More info at https://symfony.com/cve-2026-45069...

CVE-2026-45069: OidcTokenHandler Accepts JWTs Missing aud/iss/exp Claims

More info at https://symfony.com/cve-2026-45069...