CVE-2019-4395

Published: Oct 25, 2019Modified: Nov 21, 2024

3.3

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 1.8 / Impact: 1.4

Source: NVD

Description

IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 could allow a local user to obtain sensitive information from temporary script files. IBM X-Force ID: 162333.

Affected (4)

Products: Ibm: Cloud Orchestrator

Ibm

1 product

Cloud Orchestrator

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Cloud Orchestrator	From 2.4.0.0 to 2.4.0.5
Ibm Cloud Orchestrator	From 2.5.0.0 to 2.5.0.9
Ibm Cloud Orchestrator	From 2.4.0.0 to 2.4.0.5
Ibm Cloud Orchestrator	From 2.5.0.0 to 2.5.0.9

References (4)

https://exchange.xforce.ibmcloud.com/vulnerabilities/162233

Source: psirt@us.ibm.com

VDB EntryVendor Advisory

https://www.ibm.com/support/pages/node/1097175

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/162233

Source: af854a3a-2127-422b-91ae-364da2661108

VDB EntryVendor Advisory

https://www.ibm.com/support/pages/node/1097175

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.