PT-2019-16971
CVE-2019-4216
·
Published
2019-11-22
·
Updated
2019-11-25
Description by
CVSS 2.0
4.9
MediumMetricsAV:N/AC:M/Au:S/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
IBM SmartCloud Analytics versions 1.3.1 through 1.3.5
Description
The issue allows for a possible host header injection attack, which could lead to HTTP cache poisoning or firewall bypass.
Recommendations
For IBM SmartCloud Analytics versions 1.3.1 through 1.3.5, update to a version outside of the affected range to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾