9.1
Critical
CVE-2019-4244 IBM SmartCloud Analytics 1.3.1 through 1.3.5 could allow a remote attacker to gain unauthorized information and…
Description
IBM SmartCloud Analytics 1.3.1 through 1.3.5 could allow a remote attacker to gain unauthorized information and unrestricted control over Zookeeper installations due to missing authentication. IBM X-Force ID: 159518.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SmartCloud Analytics 1.3 | 1.3.1 → 1.3.5 | No fix stated |
Other CVEs of SmartCloud Analytics
The 5 CVEs of SmartCloud Analytics →
CVE-2019-4243
IBM SmartCloud Analytics 1.3.1 through 1.3.5 allows unauthorized disclosure of information like accessing solrconfig.xml…
5.1
Medium
CVE-2019-4214
IBM SmartCloud Analytics 1.3.1 through 1.3.5 does not set the secure attribute on authorization tokens or session…
3.7
Low
CVE-2019-4215
IBM SmartCloud Analytics 1.3.1 through 1.3.5 could allow a remote attacker to hijack the clicking action of the victim
6.1
Medium
CVE-2019-4216
IBM SmartCloud Analytics 1.3.1 through 1.3.5 is vulnerable to possible host header injection attack that could lead to…
4.6
Medium