IBM Cloud Private CVE-2019-4119 Security Bypass Vulnerability

Bugtraq ID:	108920
Class:	Access Validation Error
CVE:	CVE-2019-4119
Remote:	Yes
Local:	No
Published:	May 15 2019 12:00AM
Updated:	May 15 2019 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	IBM Cloud Private 3.1.2 IBM Cloud Private 3.1.1 IBM Cloud Private 3.1.0 IBM Cloud Private 2.1.0
Not Vulnerable:

IBM Cloud Private CVE-2019-4119 Security Bypass Vulnerability

IBM Cloud Private Kubernetes API server is prone to a security-bypass vulnerability.

Successful exploits may allow an attacker to bypass certain security restrictions and to perform unauthorized actions; this may aid in launching further attacks.

IBM Cloud Private versions 2.1.x, 3.1.0, 3.1.1 and 3.1.2 are vulnerable.

IBM Cloud Private CVE-2019-4119 Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Cloud Private CVE-2019-4119 Security Bypass Vulnerability

References:

• IBM Homepage (IBM)
  
• Security Bulletin: Multiple Security Vulnerabilities affect IBM Cloud Private Ku (IBM)