CVE-2019-4119

published 2019-05-17

CVE-2019-4119: IBM Cloud Private Kubernetes API server 2.1.0, 3.1.0, 3.1.1, and 3.1.2 can be used as an HTTP proxy to not only cluster internal but also external target IP…

medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C N I L A N

IBM Cloud Private Kubernetes API server 2.1.0, 3.1.0, 3.1.1, and 3.1.2 can be used as an HTTP proxy to not only cluster internal but also external target IP addresses. IBM X-Force ID: 158145.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
ibm	cloud_private	—	—
ibm	cloud_private	—	—
ibm	cloud_private	—	—
ibm	cloud_private	—	—
ibm	cloud_private	2.1.0.0 – 2.1.0.3	—

CWE-20