CVE-2019-4415

3 documents3 sources
Severity
7.8HIGH
EPSS
0.0%
top 85.86%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Cloud Private
Timeline
PublishedJul 25
Latest updateMay 24

Description

IBM Cloud Private 3.1.1 and 3.1.2 could allow a local user to obtain elevated privileges due to improper security context constraints. IBM X-Force ID: 162706.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5ibm/cloud_private3.1.1, 3.1.2+1
▶NVDibm/cloud_private3.1.1, 3.1.2+1

🔴Vulnerability Details

2
GHSA
GHSA-fvj2-mm7p-8mx9: IBM Cloud Private 3↗2022-05-24
▶
CVEList
CVE-2019-4415: IBM Cloud Private 3↗2019-07-25
▶
CVE-2019-4415 (HIGH CVSS 7.8) | IBM Cloud Private 3.1.1 and 3.1.2 c | cvebase.io