CVE-2019-4398
IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through 2.4.0.5 could allow a local user to obtain sensitive information from SessionManagement cookies. IBM X-Force ID: 162259.
- Score
- CVSS 3.0 4.0 Medium
- Status
- Modified - psirt@us.ibm.com
- Published
- 2019-10-24
- Last modified
- 2024-09-17
- Weaknesses
- CWE-552
Affected products
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/162259
- https://www.ibm.com/support/pages/node/1077123
