Information Disclosure in IBM TRIRIGA Application Platform
CVE-2019-4207

4MEDIUM

Key Information:

Vendor
IBM
Status
Tririga Application Platform
Vendor
CVE Published:
7 May 2019

Summary

The IBM TRIRIGA Application Platform versions 3.5.3 and 3.6.0 exhibit a vulnerability that allows local users to access sensitive information, which could be exploited for further attacks. This could compromise system integrity and user data. Organizations using these versions are advised to apply necessary mitigations and updates to enhance their security posture.

Affected Version(s)

TRIRIGA Application Platform 3.5.3

TRIRIGA Application Platform 3.6.0

References

https://www.ibm.com/support/docview.wss?uid=ibm10880261
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/159128
vdb-entryx_refsource_XF

CVSS V3.1

Score:
4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.