5.5
Medium
CVE-2019-4116 IBM Cloud Private 2.1.0, 3.1.0, and 3.1.1 could disclose highly sensitive information in installer logs that could be…
Description
IBM Cloud Private 2.1.0, 3.1.0, and 3.1.1 could disclose highly sensitive information in installer logs that could be use for further attacks against the system. IBM X-Force ID: 158115.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cloud Private 3.1 | 3.1.0 → 3.1.1 | No fix stated |
| Cloud Private | 2.1.0 | No fix stated |
Other CVEs of Cloud Private
The 15 CVEs of Cloud Private →
CVE-2019-4120
IBM Cloud Private 3.1.1 and 3.1.2 is vulnerable to cross-site scripting
5.4
Medium
CVE-2019-4117
IBM Cloud Private 3.1.1 and 3.1.2 is vulnerable to cross-site request forgery which could allow an attacker to execute…
4.3
Medium
CVE-2019-4284
IBM Cloud Private 2.1.0 , 3.1.0, 3.1.1, and 3.1.2 could allow a local privileged user to obtain sensitive OIDC token…
4.4
Medium
CVE-2019-4415
IBM Cloud Private 3.1.1 and 3.1.2 could allow a local user to obtain elevated privileges due to improper security…
4.9
Medium