CVE-2019-4226: XSS
IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 159243.
Other sources
IBM PureApplication System is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2019-4226?
CVE-2019-4226 is a vulnerability in IBM Cloud Pak System 2.3 and 2.3.0.1 that allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted session.
How does CVE-2019-4226 affect IBM Cloud Pak System?
CVE-2019-4226 affects IBM Cloud Pak System 2.3 and 2.3.0.1, allowing users to exploit a cross-site scripting vulnerability in the Web UI.
What is the severity of CVE-2019-4226?
CVE-2019-4226 has a severity rating of 5.4 (medium).
How can CVE-2019-4226 be exploited?
CVE-2019-4226 can be exploited by embedding arbitrary JavaScript code in the Web UI of IBM Cloud Pak System 2.3 and 2.3.0.1.
Is there a fix for CVE-2019-4226?
To mitigate CVE-2019-4226, it is recommended to upgrade to a fixed version of IBM Cloud Pak System.