CVE-2019-4521
HIGH
7,0
Source: [email protected]
Attack Vector: local
Attack Complexity: high
Privileges Required: none
User Interaction: required
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
HIGH
10,0
Source: [email protected]
Access Vector: network
Access Complexity: low
Authentication: none
Confidentiality: complete
Integrity: complete
Availability: complete
Description
AI Translation Available
Platform System Manager in IBM Cloud Pak System 2.3 is potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 165179.
EPSS (Exploit Prediction Scoring System)
Trend Analysis
EPSS (Exploit Prediction Scoring System)
Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.
EPSS Score
0,0104
Percentile
0,8th
Updated
EPSS Score Trend (Last 90 Days)
1236
Improper Neutralization of Formula Elements in a CSV File
IncompleteCommon Consequences
Security Scopes Affected:
Confidentiality
Potential Impacts:
Read Application Data
Execute Unauthorized Code Or Commands
Applicable Platforms
Technologies:
Other
Application
Cloud Pak System by Ibm
CPE Identifier
View Detailed Analysis
cpe:2.3:a:ibm:cloud_pak_system:2.3:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Cloud Pak System by Ibm
CPE Identifier
View Detailed Analysis
cpe:2.3:a:ibm:cloud_pak_system:2.3.0.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://exchange.xforce.ibmcloud.com/vulnerabilities/165179
https://www.ibm.com/support/pages/node/1126605
https://exchange.xforce.ibmcloud.com/vulnerabilities/165179
https://www.ibm.com/support/pages/node/1126605