What is CVE-2019-4119?

CVE-2019-4119 is a medium-severity vulnerability in IBM Cloud Private. CVSS score: 5.3/10. Published 2019-05-17.

How severe is CVE-2019-4119?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in IBM Cloud Private

CVE-2019-4119

IBM Cloud Private Kubernetes API server 2.1.0, 3.1.0, 3.1.1, and 3.1.2 can be used as an HTTP proxy to not only cluster internal but also external target IP addresses. IBM X-Force ID: 158145.

EPSS: 0.010 (59.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.

Affected products

Ibm Cloud Private — versions 2.1.0, 3.1.0, 3.1.1
Ibm Cloud_private — versions 3.1.0, 3.1.1, 3.1.2

References

psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
psirt@us.ibm.com (VDB Entry, vdb-entry, Vendor Advisory, x_refsource_XF)

Frequently asked questions

What is CVE-2019-4119?: CVE-2019-4119 is a medium-severity vulnerability in IBM Cloud Private. CVSS score: 5.3/10. Published 2019-05-17.
How severe is CVE-2019-4119?: Medium severity. CVSS v3 base score is 5.3 out of 10.