CVE-2019-4142 IBM Cloud Private 2.1.0, 3.1.0, 3.1.1, and 3.1.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that th...
HighCVSS 8.8
EPSS 0.55%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM Cloud Private 2.1.0, 3.1.0, 3.1.1, and 3.1.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 158338.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm cloud private | >= 2.1.0, <= 2.1.0.3 | No fix listed |
| ibm cloud private | = 3.1.0 | No fix listed |
| ibm cloud private | = 3.1.1 | No fix listed |
| ibm cloud private | = 3.1.2 | No fix listed |
| ibm cloud private | = 2.1.0 | No fix listed |
References
- ibm-cloud-cve20194142-csrf (158338) vdb-entry vendor-advisory
- www.ibm.com vendor-advisory