CVE-2019-4095: IBM Cloud Pak System 2.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted…

medium4.3CVSS 3.1

AVNACLPRNUIRSUCNILAN

IBM Cloud Pak System 2.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 158015.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	cloud_pak_system	—	—
ibm	cloud_pak_system	—	—

CVSS provenance

nvdv3.14.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

osv6.8MEDIUM