Ibm

Cloud Orchestrator Enterprise

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2019-4397

  • EPSS 0.26%
  • Published 24.10.2019 12:15:11
  • Last modified 21.11.2024 04:43:33

IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through 2.4.0.5 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via serve...

3.3

CVE-2019-4398

  • EPSS 0.09%
  • Published 24.10.2019 12:15:11
  • Last modified 21.11.2024 04:43:33

IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through 2.4.0.5 could allow a local user to obtain sensitive information from SessionManagement cookies. IBM X-Force ID: 162259.