4.6
Medium
CVE-2019-4216 IBM SmartCloud Analytics 1.3.1 through 1.3.5 is vulnerable to possible host header injection attack that could lead to…
Description
IBM SmartCloud Analytics 1.3.1 through 1.3.5 is vulnerable to possible host header injection attack that could lead to HTTP cache poisoning or firewall bypass. IBM X-Force ID: 159187.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SmartCloud Analytics 1.3 | 1.3.1 → 1.3.5 | No fix stated |
Other CVEs of SmartCloud Analytics
The 5 CVEs of SmartCloud Analytics →
CVE-2019-4244
IBM SmartCloud Analytics 1.3.1 through 1.3.5 could allow a remote attacker to gain unauthorized information and…
9.1
Critical
CVE-2019-4243
IBM SmartCloud Analytics 1.3.1 through 1.3.5 allows unauthorized disclosure of information like accessing solrconfig.xml…
5.1
Medium
CVE-2019-4214
IBM SmartCloud Analytics 1.3.1 through 1.3.5 does not set the secure attribute on authorization tokens or session…
3.7
Low
CVE-2019-4215
IBM SmartCloud Analytics 1.3.1 through 1.3.5 could allow a remote attacker to hijack the clicking action of the victim
6.1
Medium