CVE-2019-4098: XSS
IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158020.
Other sources
IBM Pure Application System is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2019-4098?
CVE-2019-4098 is a vulnerability in IBM Cloud Pak System 2.3 and 2.3.0.1 that allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted session.
How does CVE-2019-4098 impact IBM Cloud Pak System?
CVE-2019-4098 allows users to manipulate the Web UI of IBM Cloud Pak System, potentially leading to the disclosure of credentials within a trusted session.
What is the severity of CVE-2019-4098?
CVE-2019-4098 has a severity rating of medium (5.4).
How can I fix CVE-2019-4098 in IBM Cloud Pak System?
To fix CVE-2019-4098 in IBM Cloud Pak System, it is recommended to apply the necessary security patches provided by IBM.
Where can I find more information about CVE-2019-4098?
You can find more information about CVE-2019-4098 on the IBM X-Force ID: 158020 page, as well as on the IBM support page.