CVE-2019-4381

CVSS 5.9 MEDIUMEPSS 0.4%

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 5.9EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

14 Jun 2019Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

IBM i 7.27.3 Clustering could allow a local attacker to obtain sensitive information, caused by the use of advanced node failure detection using the REST API to interface with the HMC. An attacker could exploit this vulnerability to obtain HMC credentials. IBM X-Force ID: 162159.

CVSS:3.0/AV:L/I:N/AC:H/UI:N/C:H/PR:N/A:N/S:C/RL:O/RC:C/E:U

Affected products

IBM · i

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/162159 https://www.ibm.com/support/docview.wss?uid=ibm10887369 http://www.securityfocus.com/bid/108808