CVE-2019-4119

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-05-17 · updated 2026-06-17

Description

IBM Cloud Private Kubernetes API server 2.1.0, 3.1.0, 3.1.1, and 3.1.2 can be used as an HTTP proxy to not only cluster internal but also external target IP addresses. IBM X-Force ID: 158145.

Affected products

IBM Cloud Private: from 2.1.0.0 through 2.1.0.3; 3.1.0, 3.1.1, 3.1.2

References

http://www.ibm.com/support/docview.wss?uid=ibm10878460
https://exchange.xforce.ibmcloud.com/vulnerabilities/158145
http://www.ibm.com/support/docview.wss?uid=ibm10878460
https://exchange.xforce.ibmcloud.com/vulnerabilities/158145

Get alerted when CVE-2019-4119 or the next vulnerability affects your stack