CVE-2019-4234

CVSS 4.3 MEDIUMEPSS 0.9%

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 4.3EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

26 jun 2019Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

IBM PureApplication System 2.2.3.0 through 2.2.5.3 weakness in the implementation of locking feature in pattern editor. An attacker by intercepting the subsequent requests can bypass business logic to modify the pattern to unlocked state. IBM X-Force ID: 159416.

CVSS:3.0/C:N/AV:N/S:U/PR:L/A:N/AC:L/I:L/UI:N/RC:C/E:U/RL:O

Produtos afetados

IBM · PureApplication System

Referências

https://exchange.xforce.ibmcloud.com/vulnerabilities/159416 https://www-01.ibm.com/support/docview.wss?uid=ibm10885602