Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:cloud_private:3.1.0:*:*:*:*:*:*:*

part: a version: 3.1.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductCloud Private (139b1e95-a932-5d52-9c33-9a4d7362a509)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-4439 vulnerable 2026-06-08 05:13:57.176375 Details available
MEDIUM (5.9)
IBM Cloud Private 3.1.0, 3.1.1, and 3.1.2 does not invalidate session after logout which could allow a local user to impersonate another user on the system. IBM X-Force ID: 162949.
Published: 2019-07-25T14:30:21.204Z
Updated: 2024-09-16T17:43:10.762Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4284 vulnerable 2026-06-08 05:13:57.038693 Details available
MEDIUM (4.4)
IBM Cloud Private 2.1.0 , 3.1.0, 3.1.1, and 3.1.2 could allow a local privileged user to obtain sensitive OIDC token that is printed to log files, which could be used to log in to the system as another user. IBM X-Force ID: 160512.
Published: 2019-08-05T13:40:15.577Z
Updated: 2024-09-17T01:45:57.622Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4142 vulnerable 2026-06-08 05:13:56.881909 Details available
MEDIUM (4.3)
IBM Cloud Private 2.1.0, 3.1.0, 3.1.1, and 3.1.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 158338.
Published: 2019-06-18T14:30:18.274Z
Updated: 2024-09-16T18:48:56.262Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4119 vulnerable 2026-06-08 05:13:56.855969 Details available
LOW (3.1)
IBM Cloud Private Kubernetes API server 2.1.0, 3.1.0, 3.1.1, and 3.1.2 can be used as an HTTP proxy to not only cluster internal but also external target IP addresses. IBM X-Force ID: 158145.
Published: 2019-05-17T15:20:16.726Z
Updated: 2024-09-16T18:44:04.593Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4117 vulnerable 2026-06-08 05:13:56.845340 Details available
MEDIUM (4.3)
IBM Cloud Private 3.1.1 and 3.1.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 158116.
Published: 2019-08-20T18:25:26.433Z
Updated: 2024-09-17T00:41:30.635Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4116 vulnerable 2026-06-08 05:13:56.843698 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1943 vulnerable 2026-06-08 05:11:26.437641 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1843 vulnerable 2026-06-08 05:11:26.277626 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.