CyberSec.Space Logo
CVEブラウザに戻る

CVE-2019-4130

HIGH
8.8
CVSS Severity Score
EPSS Score0.0760%
EPSS Percentile42.59th
Published2019年12月3日
Last Modified2024年11月21日

Vulnerability Description

IBM Cloud Pak System 2.3 and 2.3.0.1 could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server. IBM X-Force ID: 158280.

Affected Platforms (CPE)

📦
Ibm

Cloud Pak System

= 2.3
📦
Ibm

Cloud Pak System

= 2.3.0.1

References & Advisories

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/158280
🔗 https://www.ibm.com/support/pages/node/1118487
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/158280
🔗 https://www.ibm.com/support/pages/node/1118487

関連する脆弱性情報

CVE-2019-45219.8

Platform System Manager in IBM Cloud Pak System 2.3 is potentially vulnerable to CVS Injection. A remote attacker could execute ar...

CVE-2020-46279.0

IBM Cloud Pak for Security 1.3.0.1(CP4S) potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary comman...

CVE-2020-49178.8

IBM Cloud Pak System 2.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauth...

CVE-2021-204797.5

IBM Cloud Pak System 2.3.0 through 2.3.3.3 Interim Fix 1 uses weaker than expected cryptographic algorithms that could allow an at...