nvd-json-data-feeds/CVE-2019/CVE-2019-44xx/CVE-2019-4442.json

{
  "id": "CVE-2019-4442",
  "sourceIdentifier": "psirt@us.ibm.com",
  "published": "2019-09-17T19:15:11.383",
  "lastModified": "2022-11-30T22:21:55.497",
  "vulnStatus": "Analyzed",
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9,0 could allow a remote attacker to traverse directories on the file system. An attacker could send a specially-crafted URL request to view arbitrary files on the system but not content. IBM X-Force ID: 163226."
    },
    {
      "lang": "es",
      "value": "IBM WebSphere Application Server versiones 7.0, 8.0, 8.5 y 9.0, podr\u00eda permitir a un atacante remoto saltar directorios sobre el sistema de archivos. Un atacante podr\u00eda enviar una petici\u00f3n de URL especialmente dise\u00f1ada para visualizar archivos arbitrarios sobre el sistema pero no contenido. ID de IBM X-Force: 163226."
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 4.3,
          "baseSeverity": "MEDIUM"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 1.4
      }
    ],
    "cvssMetricV30": [
      {
        "source": "psirt@us.ibm.com",
        "type": "Secondary",
        "cvssData": {
          "version": "3.0",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 4.3,
          "baseSeverity": "MEDIUM"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 1.4
      }
    ],
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
          "accessVector": "NETWORK",
          "accessComplexity": "LOW",
          "authentication": "SINGLE",
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 4.0
        },
        "baseSeverity": "MEDIUM",
        "exploitabilityScore": 8.0,
        "impactScore": 2.9,
        "acInsufInfo": false,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "7.0.0.0",
              "versionEndIncluding": "7.0.0.45",
              "matchCriteriaId": "9FBC4C46-A044-4A5C-80EF-2BCBF9351CEB"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "8.0.0.0",
              "versionEndIncluding": "8.0.0.15",
              "matchCriteriaId": "E596AE8A-34AD-43F3-A97E-DC79CE517C8B"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "8.5.0.0",
              "versionEndIncluding": "8.5.5.16",
              "matchCriteriaId": "E1013F0F-3270-4D58-A687-28F81AC04F93"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "9.0.0.0",
              "versionEndIncluding": "9.0.5.1",
              "matchCriteriaId": "612F6EF6-06DB-4EC8-A6DC-ECFC7C962057"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/163226",
      "source": "psirt@us.ibm.com",
      "tags": [
        "VDB Entry",
        "Vendor Advisory"
      ]
    },
    {
      "url": "https://www.ibm.com/support/pages/node/959021",
      "source": "psirt@us.ibm.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ]
    }
  ]
}