4.3
Medium
CVE-2019-4234 IBM PureApplication System 2.2.3.0 through 2.2.5.3 weakness in the implementation of locking feature in pattern editor
Description
IBM PureApplication System 2.2.3.0 through 2.2.5.3 weakness in the implementation of locking feature in pattern editor. An attacker by intercepting the subsequent requests can bypass business logic to modify the pattern to unlocked state. IBM X-Force ID: 159416.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PureApplication System 2.2 | 2.2.3.0 → 2.2.5.3 | No fix stated |
Other CVEs of PureApplication System
The 5 CVEs of PureApplication System →
CVE-2019-4241
IBM PureApplication System 2.2.3.0 through 2.2.5.3 could allow an authenticated user with local access to bypass…
8.4
High
CVE-2019-4235
IBM PureApplication System 2.2.3.0 through 2.2.5.3 does not require that users should have strong passwords by…
5.9
Medium
CVE-2019-4224
IBM PureApplication System 2.2.3.0 through 2.2.5.3 is vulnerable to SQL injection
6.3
Medium
CVE-2019-4225
IBM PureApplication System 2.2.3.0 through 2.2.5.3 stores potentially sensitive information in log files that could be…
4.4
Medium