CVE-2019-4381

Published: Jun 14, 2019Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

IBM i 7.27.3 Clustering could allow a local attacker to obtain sensitive information, caused by the use of advanced node failure detection using the REST API to interface with the HMC. An attacker could exploit this vulnerability to obtain HMC credentials. IBM X-Force ID: 162159.

Affected (2)

Products: Ibm: I

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ibm I	Version 7.2
Ibm I	Version 7.3

Related CWEs

References (6)

http://www.securityfocus.com/bid/108808

Source: psirt@us.ibm.com

Broken Link

https://exchange.xforce.ibmcloud.com/vulnerabilities/162159

Source: psirt@us.ibm.com

VDB EntryVendor Advisory

https://www.ibm.com/support/docview.wss?uid=ibm10887369

Source: psirt@us.ibm.com

PatchVendor Advisory

http://www.securityfocus.com/bid/108808

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://exchange.xforce.ibmcloud.com/vulnerabilities/162159

Source: af854a3a-2127-422b-91ae-364da2661108

VDB EntryVendor Advisory

https://www.ibm.com/support/docview.wss?uid=ibm10887369

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.