Skip to content
OpenAdvisories
Medium · 4.0 CVE-2019-4398 EUVD-2019-14005GHSA-2hv5-gqgx-ppf5

IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through 2.4.0.5 could allow a local user to obtain…

Published Oct 24, 2019 · Updated Sep 17, 2024 · Assigned by ibm

Vendor: IBM Product: Cloud Orchestrator

Description

IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through 2.4.0.5 could allow a local user to obtain sensitive information from SessionManagement cookies. IBM X-Force ID: 162259.

Affected products

VendorProductAffectedFixed
IBM Cloud Orchestrator 2.4, 2.4.0.1, 2.4.0.2, 2.5, 2.5.0.1, 2.4.0.3, 2.5.0.2, 2.4.0.4, 2.5.0.3, 2.5.0.4, 2.4.0.5, 2.5.0.5, 2.5.0.6, 2.5.0.7, 2.5.0.8, 2.5.0.9 —

References