CVE-2019-4234 - IBM PureApplication System 2.2.3.0 through 2.2.5.3 weakness in the implementation of locking feature in pattern editor

Back Back to CVE browser

MEDIUM

IBM PureApplication System 2.2.3.0 through 2.2.5.3 weakness in the implementation of locking feature in pattern editor

Published Jun 26, 2019

4.3

MEDIUM

CVSS 3.1

EPSS 0.90%

Description

IBM PureApplication System 2.2.3.0 through 2.2.5.3 weakness in the implementation of locking feature in pattern editor. An attacker by intercepting the subsequent requests can bypass business logic to modify the pattern to unlocked state. IBM X-Force ID: 159416.

Affected products

Vendor IBM Product PureApplication System Default
n/a
- Version
  2.2.3.0
  Status
  affected
  Constraints
  -
- Version
  2.2.3.1
  Status
  affected
  Constraints
  -
- Version
  2.2.3.2
  Status
  affected
  Constraints
  -
- Version
  2.2.4.0
  Status
  affected
  Constraints
  -
- Version
  2.2.5.0
  Status
  affected
  Constraints
  -
- Version
  2.2.5.1
  Status
  affected
  Constraints
  -
- Version
  2.2.5.2
  Status
  affected
  Constraints
  -
- Version
  2.2.5.3
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

PureApplication System

n/a

Version	Status	Constraints
2.2.3.0	affected	-
2.2.3.1	affected	-
2.2.3.2	affected	-
2.2.4.0	affected	-
2.2.5.0	affected	-
2.2.5.1	affected	-
2.2.5.2	affected	-
2.2.5.3	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-13841
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/159416
vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www-01.ibm.com/support/docview.wss?uid=ibm10885602
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-13841		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/159416		vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www-01.ibm.com/support/docview.wss?uid=ibm10885602		x_refsource_CONFIRMPatchVendor Advisory