CVE-2019-4095: CSRF

Q: What is the vulnerability ID of this vulnerability?

The vulnerability ID is CVE-2019-4095.

Q: What is the title of this vulnerability?

The title of this vulnerability is 'IBM Pure Application System is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.'

Q: What is the affected software?

The affected software is IBM Cloud Pak System version 2.3 and 2.3.0.1.

Q: What is the severity of CVE-2019-4095?

The severity of CVE-2019-4095 is medium with a CVSS score of 5.3.

Q: How can I fix the vulnerability CVE-2019-4095?

To fix the vulnerability, it is recommended to apply the latest security patches and updates provided by IBM.

Published Dec 4, 2019

Updated

IBM Cloud Pak System 2.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 158015.

Other sources

IBM Pure Application System is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

Affected Software

3 affected components

IBM Cloud Pak System=2.3

IBM Cloud Pak System=2.3.0.1

IBM Cloud Pak System<=2.3, 2.3.0.1

Remediation

Patch Available

https://www.ibm.com/support/pages/node/1126605

Event History

Dec 4, 2019

CVE Published

via IBM·12:00 AM

Dec 10, 2019

CVE Published

via MITRE·04:10 PM

Data Sourced

via MITRE·04:10 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-1126605

Frequently Asked Questions

What is the vulnerability ID of this vulnerability?

The vulnerability ID is CVE-2019-4095.

What is the title of this vulnerability?