CVE-2019-4381

IBM i 7.27.3 Clustering could allow a local attacker to obtain sensitive information, caused by the use of advanced node failure detection using the REST API to interface with the HMC. An attacker could exploit this vulnerability to obtain HMC credentials. IBM X-Force ID: 162159.

Score

CVSS 3.0 5.9 Medium

Status

Modified - psirt@us.ibm.com

Published

2019-06-14

Last modified

2024-09-16

Weaknesses

CWE-255

Affected products

• I (Ibm)

References

• http://www.securityfocus.com/bid/108808
• https://exchange.xforce.ibmcloud.com/vulnerabilities/162159
• https://www.ibm.com/support/docview.wss?uid=ibm10887369