CVE-2019-4066

8.8HIGH

Key Information:

Vendor
IBM
Status
Intelligent Operations Center
Vendor
CVE Published:
7 June 2019

Summary

IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 could allow an authenciated user to create arbitrary users which could cause ID management issues and result in code execution. IBM X-Force ID: 157011.

Affected Version(s)

Intelligent Operations Center 5.1.0

Intelligent Operations Center 5.1.0.1

Intelligent Operations Center 5.1.0.2

References

https://www.ibm.com/support/docview.wss?uid=ibm10879381
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/157011
vdb-entryx_refsource_XF

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.