Description
A vulnerability has been identified in the IBM Cloud Orchestrator task API. The task API might allow an authenticated user to view background information associated with actions performed on virtual machines in projects where the user belongs to.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/94440
Patch, Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg2C1000140
Scores
CVSS v3
5.5
EPSS
0.0006
EPSS Percentile
19.2%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-200
Status
published
Products (19)
ibm/cloud_orchestrator
2.4
ibm/cloud_orchestrator
2.4.0.1
ibm/cloud_orchestrator
2.4.0.2
ibm/cloud_orchestrator
2.4.0.3
ibm/cloud_orchestrator
2.5
ibm/cloud_orchestrator
2.5.01
ibm/smartcloud_orchestrator
2.3
ibm/smartcloud_orchestrator
2.3.0.1
IBM Corporation/Cloud Orchestrator
2.2
IBM Corporation/Cloud Orchestrator
2.2.0.1
... and 9 more
Published
Feb 08, 2017
Tracked Since
Feb 18, 2026