5.1
Medium
CVE-2019-4243 IBM SmartCloud Analytics 1.3.1 through 1.3.5 allows unauthorized disclosure of information like accessing solrconfig.xml…
Description
IBM SmartCloud Analytics 1.3.1 through 1.3.5 allows unauthorized disclosure of information like accessing solrconfig.xml and could allow an attacker to perform disruptive administrator tasks. IBM X-Force ID: 159517.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SmartCloud Analytics 1.3 | 1.3.1 → 1.3.5 | No fix stated |
Other CVEs of SmartCloud Analytics
The 5 CVEs of SmartCloud Analytics →
CVE-2019-4244
IBM SmartCloud Analytics 1.3.1 through 1.3.5 could allow a remote attacker to gain unauthorized information and…
9.1
Critical
CVE-2019-4214
IBM SmartCloud Analytics 1.3.1 through 1.3.5 does not set the secure attribute on authorization tokens or session…
3.7
Low
CVE-2019-4215
IBM SmartCloud Analytics 1.3.1 through 1.3.5 could allow a remote attacker to hijack the clicking action of the victim
6.1
Medium
CVE-2019-4216
IBM SmartCloud Analytics 1.3.1 through 1.3.5 is vulnerable to possible host header injection attack that could lead to…
4.6
Medium