4
CVSSv2

CVE-2019-4397

Published: 24/10/2019 Updated: 30/10/2019
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

Vulnerability Summary

IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 up to and including 2.5.0.9 and 2.4 up to and including 2.4.0.5 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 162239

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

ibm cloud orchestrator enterprise

ibm cloud orchestrator