Privilege Escalation in IBM Cloud Private Products
CVE-2019-4415

4.9MEDIUM

Key Information:

Vendor
IBM
Status
Cloud Private
Vendor
CVE Published:
25 July 2019

Summary

IBM Cloud Private versions 3.1.1 and 3.1.2 have a vulnerability that allows local users to gain elevated privileges due to improper security context constraints. This flaw could be exploited by unauthorized individuals, thereby compromising the integrity of the system and potentially exposing sensitive data. It is crucial for users of affected versions to apply the necessary patches and updates available from IBM to safeguard against potential exploitation.

Affected Version(s)

Cloud Private 3.1.1

Cloud Private 3.1.2

References

http://www.ibm.com/support/docview.wss?uid=ibm10887857
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/162706
vdb-entryx_refsource_XF

CVSS V3.1

Score:
4.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.