CVE-2019-4665: XSS
IBM Spectrum Scale 4.2 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 171247.
Other sources
IBM Spectrum Scale is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-4665?
CVE-2019-4665 is considered a moderate severity vulnerability due to the potential for credential disclosure through cross-site scripting.
How do I fix CVE-2019-4665?
To resolve CVE-2019-4665, update IBM Spectrum Scale to versions 4.2.3.18 or later for 4.2 and 5.0.4.0 or later for 5.0.
What products are affected by CVE-2019-4665?
CVE-2019-4665 affects IBM Spectrum Scale versions 4.2.0.0 to 4.2.3.18 and 5.0.0.0 to 5.0.4.0.
What type of attack does CVE-2019-4665 facilitate?
CVE-2019-4665 facilitates cross-site scripting attacks that can allow the embedding of arbitrary JavaScript code in the Web UI.
Can CVE-2019-4665 lead to data breaches?
Yes, CVE-2019-4665 can potentially lead to data breaches by allowing the disclosure of user credentials within a trusted session.