CVE-2019-4040: XSS

Published Jan 29, 2019

Updated

IBM I 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 156164.

Affected Software

2 affected components

IBM i=7.2

IBM i=7.3

Event History

Jan 31, 2019

CVE Published

03:29 PM

Data Sourced

via NVD·03:29 PM

DescriptionSeverityWeaknessAffected Software

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2019-4040?

CVE-2019-4040 is classified as a medium-severity vulnerability due to its potential to lead to credentials disclosure.

How do I fix CVE-2019-4040?

To fix CVE-2019-4040, upgrade your IBM I system to the latest version that patches this vulnerability.

Which versions of IBM I are affected by CVE-2019-4040?

CVE-2019-4040 affects IBM I versions 7.2 and 7.3.

What type of vulnerability is CVE-2019-4040?

CVE-2019-4040 is a cross-site scripting (XSS) vulnerability that allows arbitrary JavaScript code to be embedded.

What are the potential impacts of CVE-2019-4040?

The potential impacts of CVE-2019-4040 include altering the intended functionality of the Web UI and exposing sensitive user credentials.