Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:cloud_private:3.1.1:*:*:*:*:*:*:*

part: a version: 3.1.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductCloud Private (139b1e95-a932-5d52-9c33-9a4d7362a509)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-4439 vulnerable 2026-06-08 05:13:57.176399 Details available
MEDIUM (5.9)
IBM Cloud Private 3.1.0, 3.1.1, and 3.1.2 does not invalidate session after logout which could allow a local user to impersonate another user on the system. IBM X-Force ID: 162949.
Published: 2019-07-25T14:30:21.204Z
Updated: 2024-09-16T17:43:10.762Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4415 vulnerable 2026-06-08 05:13:57.135809 Details available
MEDIUM (4.9)
IBM Cloud Private 3.1.1 and 3.1.2 could allow a local user to obtain elevated privileges due to improper security context constraints. IBM X-Force ID: 162706.
Published: 2019-07-25T14:30:21.128Z
Updated: 2024-09-16T23:16:50.754Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4284 vulnerable 2026-06-08 05:13:57.038717 Details available
MEDIUM (4.4)
IBM Cloud Private 2.1.0 , 3.1.0, 3.1.1, and 3.1.2 could allow a local privileged user to obtain sensitive OIDC token that is printed to log files, which could be used to log in to the system as another user. IBM X-Force ID: 160512.
Published: 2019-08-05T13:40:15.577Z
Updated: 2024-09-17T01:45:57.622Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4143 vulnerable 2026-06-08 05:13:56.882469 Details available
MEDIUM (5.5)
The IBM Cloud Private Key Management Service (IBM Cloud Private 3.1.1 and 3.1.2) could allow a local user to obtain sensitive from the KMS plugin container log. IBM X-Force ID: 158348.
Published: 2019-04-08T14:50:38.168Z
Updated: 2024-09-17T00:10:51.983Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4142 vulnerable 2026-06-08 05:13:56.882032 Details available
MEDIUM (4.3)
IBM Cloud Private 2.1.0, 3.1.0, 3.1.1, and 3.1.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 158338.
Published: 2019-06-18T14:30:18.274Z
Updated: 2024-09-16T18:48:56.262Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4119 vulnerable 2026-06-08 05:13:56.856111 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4117 vulnerable 2026-06-08 05:13:56.845370 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4116 vulnerable 2026-06-08 05:13:56.844797 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1943 vulnerable 2026-06-08 05:11:26.437663 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1939 vulnerable 2026-06-08 05:11:26.436906 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1938 vulnerable 2026-06-08 05:11:26.436405 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1937 vulnerable 2026-06-08 05:11:26.435945 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.