Script Injection Vulnerability in IBM Cloud Automation Manager
CVE-2019-4133

5MEDIUM

Key Information:

Vendor
IBM
Status
Cloud Automation Manager
Vendor
CVE Published:
29 August 2019

Summary

IBM Cloud Automation Manager version 3.1.2 is susceptible to a script injection vulnerability that can be exploited by an attacker with access to the client computer. This allows the attacker to run arbitrary scripts, potentially compromising system integrity and data security. For more information, refer to IBM's support documentation or the X-Force vulnerability database.

Affected Version(s)

Cloud Automation Manager 3.1.2

References

https://www.ibm.com/support/docview.wss?uid=ibm10967359
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/158278
vdb-entryx_refsource_XF

CVSS V3.1

Score:
5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.