First published: Thu Jul 25 2019(Updated: )
IBM Cloud Private 2.1.0, 3.1.0, and 3.1.1 could disclose highly sensitive information in installer logs that could be use for further attacks against the system. IBM X-Force ID: 158115.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Cloud Private | =2.1.0 | |
IBM Cloud Private | =3.1.0 | |
IBM Cloud Private | =3.1.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this issue is CVE-2019-4116.
The severity of CVE-2019-4116 is medium with a severity value of 5.5.
The software versions affected by CVE-2019-4116 are IBM Cloud Private 2.1.0, 3.1.0, and 3.1.1.
CVE-2019-4116 could disclose highly sensitive information in installer logs that could be used for further attacks against the system.
Yes, you can find more information about CVE-2019-4116 on the following links: [IBM Security Bulletin](http://www.ibm.com/support/docview.wss?uid=ibm10885318) and [IBM X-Force Exchange](https://exchange.xforce.ibmcloud.com/vulnerabilities/158115).