CVE-2019-4244

CWE-306 — Missing Authentication3 documents3 sources
Severity
9.1CRITICAL
EPSS
0.7%
top 28.69%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Smartcloud Analytics LOG AnalysisIBM Smartcloud Analytics
Timeline
PublishedDec 10
Latest updateMay 24

Description

IBM SmartCloud Analytics 1.3.1 through 1.3.5 could allow a remote attacker to gain unauthorized information and unrestricted control over Zookeeper installations due to missing authentication. IBM X-Force ID: 159518.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NExploitability: 3.9 | Impact: 5.2

Affected Packages2 packages

▶CVEListV5ibm/smartcloud_analytics5 versions+4

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-8jfm-678p-xw3j: IBM SmartCloud Analytics 1↗2022-05-24
▶
CVEList
CVE-2019-4244: IBM SmartCloud Analytics 1↗2019-12-10
▶
CVE-2019-4244 (CRITICAL CVSS 9.1) | IBM SmartCloud Analytics 1.3.1 thro | cvebase.io