CVE-2019-4072

4.7MEDIUM

Key Information:

Vendor
IBM
Status
Spectrum Control Standard Edition
Vendor
CVE Published:
9 May 2019

Summary

IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) allows users to remain idle within the application even when a user has logged out. Utilizing the application back button users can remain logged in as the current user for a short period of time, therefore users are presented with information for Spectrum Control Application. IBM X-Force ID: 157064.

Affected Version(s)

Spectrum Control Standard Edition 5.2.1

Spectrum Control Standard Edition 5.2.8

Spectrum Control Standard Edition 5.2.11

References

http://www.ibm.com/support/docview.wss?uid=ibm10873036
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/157064
vdb-entryx_refsource_XF

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.