Authentication Bypass Vulnerability in IBM PureApplication System
CVE-2019-4241

8.4HIGH

Key Information:

Vendor
IBM
Status
Pureapplication System
Vendor
CVE Published:
26 June 2019

Summary

An authentication bypass vulnerability exists in IBM PureApplication System versions 2.2.3.0 to 2.2.5.3, which allows an authenticated user with local access to circumvent authentication mechanisms and gain unauthorized administrative privileges. This vulnerability poses significant risks due to potential unauthorized access to sensitive system functionalities and data.

Affected Version(s)

PureApplication System 2.2.3.0

PureApplication System 2.2.3.1

PureApplication System 2.2.3.2

References

https://www-01.ibm.com/support/docview.wss?uid=ibm10885602
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/159467
vdb-entryx_refsource_XF

CVSS V3.1

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.