Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-4072

Опубликовано: 09 мая 2019
Источник: nvd
CVSS3: 4.7
CVSS3: 6.3
CVSS2: 6.5
EPSS Низкий

Описание

IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) allows users to remain idle within the application even when a user has logged out. Utilizing the application back button users can remain logged in as the current user for a short period of time, therefore users are presented with information for Spectrum Control Application. IBM X-Force ID: 157064.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:spectrum_control:*:*:*:*:*:*:*:*
Версия от 5.2.8 (включая) до 5.2.17.2 (включая)
cpe:2.3:a:ibm:spectrum_control:*:*:*:*:*:*:*:*
Версия от 5.3.0 (включая) до 5.3.1 (включая)
cpe:2.3:a:ibm:tivoli_storage_productivity_center:*:*:*:*:*:*:*:*
Версия от 5.2.0 (включая) до 5.2.7.1 (включая)

EPSS

Процентиль: 36%
0.00153
Низкий

4.7 Medium

CVSS3

6.3 Medium

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-613

Связанные уязвимости

CVSS3: 6.3
github
больше 3 лет назад

IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) allows users to remain idle within the application even when a user has logged out. Utilizing the application back button users can remain logged in as the current user for a short period of time, therefore users are presented with information for Spectrum Control Application. IBM X-Force ID: 157064.

EPSS

Процентиль: 36%
0.00153
Низкий

4.7 Medium

CVSS3

6.3 Medium

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-613