9.1
Critique
CVE-2019-4244 IBM SmartCloud Analytics 1.3.1 through 1.3.5 could allow a remote attacker to gain unauthorized information and…
Description
IBM SmartCloud Analytics 1.3.1 through 1.3.5 could allow a remote attacker to gain unauthorized information and unrestricted control over Zookeeper installations due to missing authentication. IBM X-Force ID: 159518.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SmartCloud Analytics 1.3 | 1.3.1 → 1.3.5 | Pas de correctif indiqué |
Autres CVE de SmartCloud Analytics
Les 5 CVE de SmartCloud Analytics →
CVE-2019-4243
IBM SmartCloud Analytics 1.3.1 through 1.3.5 allows unauthorized disclosure of information like accessing solrconfig.xml…
5.1
Moyenne
CVE-2019-4214
IBM SmartCloud Analytics 1.3.1 through 1.3.5 does not set the secure attribute on authorization tokens or session…
3.7
Faible
CVE-2019-4215
IBM SmartCloud Analytics 1.3.1 through 1.3.5 could allow a remote attacker to hijack the clicking action of the victim
6.1
Moyenne
CVE-2019-4216
IBM SmartCloud Analytics 1.3.1 through 1.3.5 is vulnerable to possible host header injection attack that could lead to…
4.6
Moyenne