CVE-2019-4234

IBM PureApplication System 2.2.3.0 through 2.2.5.3 weakness in the implementation of locking feature in pattern editor

Medium · published June 26, 2019

CVSS v3.0
4.3
EPSS
1%
Percentile
58.7
In the wild
Unconfirmed
What it is

IBM PureApplication System 2.2.3.0 through 2.2.5.3 weakness in the implementation of locking feature in pattern editor. An attacker by intercepting the subsequent requests can bypass business logic to modify the pattern to unlocked state. IBM X-Force ID: 159416.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/C:N/AV:N/S:U/PR:L/A:N/AC:L/I:L/UI:N/RC:C/E:U/RL:O
CVSS v4.0
Not supplied
EPSS
0.00879 · 58.7th percentile
Published
2019-06-26T14:35Z
EPSS history
Timeline
  • 26 JUN 14:35Z
    IBM PureApplication System 2.2.3.0 through 2.2.5.3 weakness in the implementation of locking feature in pattern editor
    cvelistv5