CVEvulnerability
CVE-2019-4381
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-06-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.0 ([email protected])
- 5.9 MEDIUM — CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-255
Description
IBM i 7.27.3 Clustering could allow a local attacker to obtain sensitive information, caused by the use of advanced node failure detection using the REST API to interface with the HMC. An attacker could exploit this vulnerability to obtain HMC credentials. IBM X-Force ID: 162159.
Affected configurations
• ibm i 7.2
• ibm i 7.3
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/bid/108808 Broken Link
- https://exchange.xforce.ibmcloud.com/vulnerabilities/162159 VDB Entry, Vendor Advisory
- https://www.ibm.com/support/docview.wss?uid=ibm10887369 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/108808 Broken Link
- https://exchange.xforce.ibmcloud.com/vulnerabilities/162159 VDB Entry, Vendor Advisory
- https://www.ibm.com/support/docview.wss?uid=ibm10887369 Patch, Vendor Advisory