3.3
Low
CVE-2016-0205 A vulnerability has been identified in IBM Cloud Orchestrator 2.3, 2.3.0.1, 2.4, and 2.4.0.1 that could allow an…
Description
A vulnerability has been identified in IBM Cloud Orchestrator 2.3, 2.3.0.1, 2.4, and 2.4.0.1 that could allow an attacker after authentication to enumerate valid users of the system. IBM X-Force ID: 109394.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cloud Orchestrator 2.4 | 2.4 → 2.4.0.1 | No fix stated |
| Cloud Orchestrator 2.3 | 2.3 → 2.3.0.1 | No fix stated |
Other CVEs of Cloud Orchestrator
The 10 CVEs of Cloud Orchestrator →
CVE-2019-4400
IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 could allow a remote attacker to traverse directories…
4.3
Medium
CVE-2019-4461
IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 is vulnerable to HTTP Response Splitting caused by…
5.4
Medium
CVE-2019-4396
IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 is vulnerable to HTTP response splitting attacks,…
5.4
Medium
CVE-2019-4399
IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 uses weaker than expected cryptographic algorithms…
5.9
Medium