IBM Cloud Private 3.1.2

CPE Details

IBM Cloud Private 3.1.2
ibm
cloud_private
3.1.2
2019-04-09
14h50 +00:00
2019-04-09
14h50 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:ibm:cloud_private:3.1.2:*:*:*:*:*:*:*

Informations

Vendor

ibm

Product

cloud_private

Version

3.1.2

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2019-4120 2019-08-20 19h30 +00:00 IBM Cloud Private 3.1.1 and 3.1.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158146.
5.4
Medium
CVE-2019-4117 2019-08-20 18h25 +00:00 IBM Cloud Private 3.1.1 and 3.1.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 158116.
8.8
High
CVE-2019-4284 2019-08-05 13h40 +00:00 IBM Cloud Private 2.1.0 , 3.1.0, 3.1.1, and 3.1.2 could allow a local privileged user to obtain sensitive OIDC token that is printed to log files, which could be used to log in to the system as another user. IBM X-Force ID: 160512.
4.4
Medium
CVE-2019-4439 2019-07-25 14h30 +00:00 IBM Cloud Private 3.1.0, 3.1.1, and 3.1.2 does not invalidate session after logout which could allow a local user to impersonate another user on the system. IBM X-Force ID: 162949.
5.3
Medium
CVE-2019-4415 2019-07-25 14h30 +00:00 IBM Cloud Private 3.1.1 and 3.1.2 could allow a local user to obtain elevated privileges due to improper security context constraints. IBM X-Force ID: 162706.
7.8
High
CVE-2019-4142 2019-06-18 14h30 +00:00 IBM Cloud Private 2.1.0, 3.1.0, 3.1.1, and 3.1.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 158338.
8.8
High
CVE-2019-4119 2019-05-17 15h20 +00:00 IBM Cloud Private Kubernetes API server 2.1.0, 3.1.0, 3.1.1, and 3.1.2 can be used as an HTTP proxy to not only cluster internal but also external target IP addresses. IBM X-Force ID: 158145.
5.3
Medium
CVE-2019-4143 2019-04-08 14h50 +00:00 The IBM Cloud Private Key Management Service (IBM Cloud Private 3.1.1 and 3.1.2) could allow a local user to obtain sensitive from the KMS plugin container log. IBM X-Force ID: 158348.
5.5
Medium