Vulnerability Details : CVE-2019-4119
IBM Cloud Private Kubernetes API server 2.1.0, 3.1.0, 3.1.1, and 3.1.2 can be used as an HTTP proxy to not only cluster internal but also external target IP addresses. IBM X-Force ID: 158145.
Products affected by CVE-2019-4119
- cpe:2.3:a:ibm:cloud_private:*:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:cloud_private:3.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:cloud_private:3.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:cloud_private:3.1.2:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2019-4119
0.06%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 26 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2019-4119
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:P/A:N |
10.0
|
2.9
|
NIST | |
|
3.1
|
LOW | CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N |
1.6
|
1.4
|
IBM Corporation | |
|
5.3
|
MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N |
3.9
|
1.4
|
NIST |
References for CVE-2019-4119
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/158145
IBM Cloud Private proxy server CVE-2019-4119 Vulnerability ReportVDB Entry;Vendor Advisory
-
http://www.ibm.com/support/docview.wss?uid=ibm10878460
IBM Security Bulletin: Multiple Security Vulnerabilities affect IBM Cloud Private KubernetesPatch;Vendor Advisory
Jump to