{"api_version":"1","generated_at":"2026-07-23T11:20:17+00:00","cve":"CVE-2019-4381","urls":{"html":"https://cve.report/CVE-2019-4381","api":"https://cve.report/api/cve/CVE-2019-4381.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2019-4381","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-4381"},"summary":{"title":"CVE-2019-4381","description":"IBM i 7.27.3 Clustering could allow a local attacker to obtain sensitive information, caused by the use of advanced node failure detection using the REST API to interface with the HMC. An attacker could exploit this vulnerability to obtain HMC credentials. IBM X-Force ID: 162159.","state":"PUBLIC","assigner":"psirt@us.ibm.com","published_at":"2019-06-14 15:29:00","updated_at":"2023-03-02 16:28:00"},"problem_types":["CWE-255"],"metrics":[],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/162159","name":"ibm-i-cve20194381-info-disc (162159)","refsource":"XF","tags":["VDB Entry","Vendor Advisory"],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/108808","name":"108808","refsource":"BID","tags":[],"title":"Malformed Request","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.ibm.com/support/docview.wss?uid=ibm10887369","name":"https://www.ibm.com/support/docview.wss?uid=ibm10887369","refsource":"CONFIRM","tags":["Vendor Advisory"],"title":"Security Bulletin: IBM i Clustering is affected by CVE-2019-4381","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-4381","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-4381","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2019","cve_id":"4381","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"ibm","cpe5":"i","cpe6":"7.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2019","cve_id":"4381","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"ibm","cpe5":"i","cpe6":"7.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2019","cve_id":"4381","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"ibm","cpe5":"i","cpe6":"7.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2019","cve_id":"4381","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"ibm","cpe5":"i","cpe6":"7.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"STATE":"PUBLIC","ID":"CVE-2019-4381","DATE_PUBLIC":"2019-06-12T00:00:00","ASSIGNER":"psirt@us.ibm.com"},"impact":{"cvssv3":{"TM":{"RL":"O","RC":"C","E":"U"},"BM":{"AV":"L","I":"N","AC":"H","UI":"N","C":"H","PR":"N","SCORE":"5.900","A":"N","S":"C"}}},"data_format":"MITRE","references":{"reference_data":[{"title":"IBM Security Bulletin 887369 (i)","url":"https://www.ibm.com/support/docview.wss?uid=ibm10887369","refsource":"CONFIRM","name":"https://www.ibm.com/support/docview.wss?uid=ibm10887369"},{"title":"X-Force Vulnerability Report","refsource":"XF","name":"ibm-i-cve20194381-info-disc (162159)","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/162159"},{"refsource":"BID","name":"108808","url":"http://www.securityfocus.com/bid/108808"}]},"affects":{"vendor":{"vendor_data":[{"vendor_name":"IBM","product":{"product_data":[{"product_name":"i","version":{"version_data":[{"version_value":"7.27.3"}]}}]}}]}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Obtain Information"}]}]},"description":{"description_data":[{"lang":"eng","value":"IBM i 7.27.3 Clustering could allow a local attacker to obtain sensitive information, caused by the use of advanced node failure detection using the REST API to interface with the HMC. An attacker could exploit this vulnerability to obtain HMC credentials. IBM X-Force ID: 162159."}]},"data_version":"4.0","data_type":"CVE"},"nvd":{"publishedDate":"2019-06-14 15:29:00","lastModifiedDate":"2023-03-02 16:28:00","problem_types":["CWE-255"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"severity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:ibm:i:7.2:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:ibm:i:7.3:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2019","CveId":"4381","Ordinal":"141992","Title":"CVE-2019-4381","CVE":"CVE-2019-4381","Year":"2019"},"notes":[{"CveYear":"2019","CveId":"4381","Ordinal":"1","NoteData":"IBM i 7.27.3 Clustering could allow a local attacker to obtain sensitive information, caused by the use of advanced node failure detection using the REST API to interface with the HMC. An attacker could exploit this vulnerability to obtain HMC credentials. IBM X-Force ID: 162159.","Type":"Description","Title":null},{"CveYear":"2019","CveId":"4381","Ordinal":"2","NoteData":"2019-06-14","Type":"Other","Title":"Published"},{"CveYear":"2019","CveId":"4381","Ordinal":"3","NoteData":"2019-06-18","Type":"Other","Title":"Modified"}]}}}