CVE-2019-4400

MEDIUM · CVSS 4.3 EPSS 1.36%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-10-25 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2019-4400

Severity

MEDIUM

CVSS

4.3

EPSS

1.36%

Original NVD Description

IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 162261.