CVE-2019-4035

Опубликовано: 22 мар. 2019

Источник: nvd

CVSS3: 6.3

CVSS3: 5.4

CVSS2: 4.9

EPSS Низкий

Описание

IBM Content Navigator 3.0CD could allow attackers to direct web traffic to a malicious site. If attackers make a fake IBM Content Navigator site, they can send a link to ICN users to send request to their Edit client directly. Then Edit client will download documents from the fake ICN website. IBM X-Force ID: 156001.

Ссылки

http://www.ibm.com/support/docview.wss?uid=ibm10869060
Vendor Advisory
http://www.securityfocus.com/bid/107557
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/156001
VDB Entry
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=ibm10869060
Vendor Advisory
http://www.securityfocus.com/bid/107557
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/156001
VDB Entry
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ibm:content_navigator:3.0.0:*:*:*:continuous_delivery:*:*:*

EPSS

Процентиль: 33%

0.00126

Низкий

6.3 Medium

CVSS3

5.4 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-601

Связанные уязвимости

GHSA-2h27-fv2f-c56r

CVSS3: 5.4

github

больше 3 лет назад

EPSS

Процентиль: 33%

0.00126

Низкий

6.3 Medium

CVSS3

5.4 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-601