Cloud Private@2.1.0 Security Vulnerabilities and Issues — Cloud Private@2.1.0 CVE List

Lucene search

IbmCloud Private2.1.0

5 matches found

CVE•added 2019/06/18 3:15 p.m.•51 views

CVE-2019-4142

IBM Cloud Private 2.1.0, 3.1.0, 3.1.1, and 3.1.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 158338.

8.8CVSS8.4AI score0.00128EPSS

CVE•added 2019/08/05 2:15 p.m.•44 views

CVE-2019-4284

IBM Cloud Private 2.1.0 , 3.1.0, 3.1.1, and 3.1.2 could allow a local privileged user to obtain sensitive OIDC token that is printed to log files, which could be used to log in to the system as another user. IBM X-Force ID: 160512.

4.4CVSS4.2AI score0.00044EPSS

CVE•added 2019/07/25 3:15 p.m.•39 views

CVE-2019-4116

IBM Cloud Private 2.1.0, 3.1.0, and 3.1.1 could disclose highly sensitive information in installer logs that could be use for further attacks against the system. IBM X-Force ID: 158115.

5.5CVSS5.1AI score0.00101EPSS

CVE•added 2019/05/17 4:29 p.m.•31 views

CVE-2019-4119

IBM Cloud Private Kubernetes API server 2.1.0, 3.1.0, 3.1.1, and 3.1.2 can be used as an HTTP proxy to not only cluster internal but also external target IP addresses. IBM X-Force ID: 158145.

5.3CVSS5.8AI score0.0026EPSS

CVE•added 2018/11/19 2:29 p.m.•30 views

CVE-2018-1841

IBM Cloud Private 2.1.0 could allow a local user to obtain the CA Private Key due to it being world readable in boot/master node. IBM X-Force ID: 150901.

6.2CVSS5.1AI score0.00052EPSS