CVE-2019-4381

IBM i 7.27.3 Clustering could allow a local attacker to obtain sensitive information, caused by the use of advanced node failure detection using the REST API…

Medium · published June 14, 2019

CVSS v3.0
5.9
EPSS
0%
Percentile
27.6
In the wild
Unconfirmed
What it is

IBM i 7.27.3 Clustering could allow a local attacker to obtain sensitive information, caused by the use of advanced node failure detection using the REST API to interface with the HMC. An attacker could exploit this vulnerability to obtain HMC credentials. IBM X-Force ID: 162159.

The record
Technical detail
CVSS v3.0
5.9 · MEDIUM
Vector
CVSS:3.0/AV:L/I:N/AC:H/UI:N/C:H/PR:N/A:N/S:C/RL:O/RC:C/E:U
CVSS v4.0
Not supplied
EPSS
0.00351 · 27.6th percentile
Published
2019-06-14T14:45Z
EPSS history
Timeline
  • 14 JUN 14:45Z
    IBM i 7.27.3 Clustering could allow a local attacker to obtain sensitive information, caused by the use of advanced node failure detection using the REST API…
    cvelistv5