CVE-2019-4398
CVE-2019-4398
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 4EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
24 Oct 2019Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through 2.4.0.5 could allow a local user to obtain sensitive information from SessionManagement cookies. IBM X-Force ID: 162259.
CVSS:3.0/I:N/AV:L/A:N/C:L/S:U/PR:N/AC:L/UI:N/RL:O/RC:C/E:U
Affected products
IBM · Cloud Orchestrator