CVE-2019-4521 - Platform System Manager in IBM Cloud Pak System 2.3 is potentially vulnerable to CVS Injection

Back Back to CVE browser

CRITICAL

Platform System Manager in IBM Cloud Pak System 2.3 is potentially vulnerable to CVS Injection

Published Dec 10, 2019

9.8

CRITICAL

CVSS 3.1

EPSS 2.61%

Description

Platform System Manager in IBM Cloud Pak System 2.3 is potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 165179.

Affected products

Vendor IBM Product Cloud Pak System Default
n/a
- Version
  2.3
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

Cloud Pak System

n/a

Version	Status	Constraints
2.3	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-1236

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-14128
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/165179
vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/1126605
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-14128		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/165179		vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/1126605		x_refsource_CONFIRMVendor Advisory