Vulnerabilities > CVE-2019-4394 - Unspecified vulnerability in IBM Cloud Orchestrator

CVSS 2.3 - LOW

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

NONE

local

low complexity

ibm

NVD

Published: 2019-10-25

Updated: 2021-07-21

Summary

IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 contain APIs that could be used by a local user to send email. IBM X-Force ID: 162232.

Vulnerable Configurations

Part	Description	Count
Application	Ibm IBM Cloud Orchestrator 2.4.0.0 IBM Cloud Orchestrator 2.4.0.1 IBM Cloud Orchestrator 2.4.0.2 IBM Cloud Orchestrator 2.4.0.3 IBM Cloud Orchestrator 2.4.0.4 IBM Cloud Orchestrator 2.4.0.5 IBM Cloud Orchestrator 2.5.0.0 IBM Cloud Orchestrator 2.5.0.1 IBM Cloud Orchestrator 2.5.0.2 IBM Cloud Orchestrator 2.5.0.3 IBM Cloud Orchestrator 2.5.0.4 IBM Cloud Orchestrator 2.5.0.5 IBM Cloud Orchestrator 2.5.0.6 IBM Cloud Orchestrator 2.5.0.7 IBM Cloud Orchestrator 2.5.0.8 IBM Cloud Orchestrator 2.5.0.9	32

Summary

Vulnerable Configurations

References