Unauthorized Information Disclosure in IBM SmartCloud Analytics
CVE-2019-4243

5.1MEDIUM

Key Information:

Vendor
IBM
Status
Smartcloud Analytics
Vendor
CVE Published:
22 November 2019

Summary

The vulnerability in IBM SmartCloud Analytics versions 1.3.1 to 1.3.5 allows for unauthorized access to sensitive configuration files such as solrconfig.xml. This exposure could enable attackers to carry out disruptive actions, including potentially accessing and manipulating administrator tasks, highlighting significant risks for organizations using this software version. It is essential for users of these affected versions to assess their security posture and apply necessary mitigations.

Affected Version(s)

SmartCloud Analytics 1.3.1

SmartCloud Analytics 1.3.2

SmartCloud Analytics 1.3.3

References

https://www.ibm.com/support/pages/node/1109721
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/159517
vdb-entryx_refsource_XF

CVSS V3.1

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.