Local File Inclusion Vulnerability in IBM Content Navigator 3.0CD
CVE-2019-4263

4.3MEDIUM

Key Information:

Vendor
IBM
Status
Content Navigator
Vendor
CVE Published:
11 July 2019

Summary

IBM Content Navigator 3.0CD is susceptible to local file inclusion, enabling unauthorized users to potentially access sensitive configuration files on the ICN server. This vulnerability could allow attackers to exploit system settings and gain more insight into the secured environment, potentially leading to further exploitation.

Affected Version(s)

Content Navigator 3.0CD

References

https://www.ibm.com/support/docview.wss?uid=ibm10882412
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/160015
vdb-entryx_refsource_XF

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.