CVE-2019-4381: Medium severity ibm iseries as/400 vulnerability
Published Jun 14, 2019
·Updated
IBM i 7.27.3 Clustering could allow a local attacker to obtain sensitive information, caused by the use of advanced node failure detection using the REST API to interface with the HMC. An attacker could exploit this vulnerability to obtain HMC credentials. IBM X-Force ID: 162159.
Affected Software
2 affected components
IBM i=7.2
IBM i=7.3
Remediation
Patch Available
Event History
Jun 14, 2019
CVE Published
via MITRE·02:45 PM
Data Sourced
via MITRE·02:45 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-4381?
The severity of CVE-2019-4381 is classified as high due to the potential for sensitive information exposure.
2
How do I fix CVE-2019-4381?
To fix CVE-2019-4381, update your IBM i operating system to the latest version that addresses this vulnerability.
3
Who is affected by CVE-2019-4381?
CVE-2019-4381 affects IBM i versions 7.2 and 7.3.
4
What kind of information can be obtained through CVE-2019-4381?
CVE-2019-4381 allows local attackers to obtain sensitive HMC credentials.
5
What attack vector is utilized in CVE-2019-4381?
CVE-2019-4381 is exploited using the REST API for advanced node failure detection in IBM i clustering.