What’s Vulnerable › Vulnerabilities

CVE-2019-4381

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-06-14 · updated 2026-06-17
• Weakness: CWE-255

Description

IBM i 7.27.3 Clustering could allow a local attacker to obtain sensitive information, caused by the use of advanced node failure detection using the REST API to interface with the HMC. An attacker could exploit this vulnerability to obtain HMC credentials. IBM X-Force ID: 162159.

Affected products

• IBM i: 7.2, 7.3

References

• http://www.securityfocus.com/bid/108808
• https://exchange.xforce.ibmcloud.com/vulnerabilities/162159
• https://www.ibm.com/support/docview.wss?uid=ibm10887369
• http://www.securityfocus.com/bid/108808
• https://exchange.xforce.ibmcloud.com/vulnerabilities/162159
• https://www.ibm.com/support/docview.wss?uid=ibm10887369

Get alerted when CVE-2019-4381 or the next vulnerability affects your stack