Medium severity · published Jun 14, 2019
CVE-2019-4381
IBM i 7.27.3 Clustering could allow a local attacker to obtain sensitive information, caused by the use of advanced node failure detection using the REST API to interface with the…
5.5
CVSS
0.4%
EPSS
No
On KEV
Description
IBM i 7.27.3 Clustering could allow a local attacker to obtain sensitive information, caused by the use of advanced node failure detection using the REST API to interface with the HMC. An attacker could exploit this vulnerability to obtain HMC credentials. IBM X-Force ID: 162159.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 29% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
I
I · Ibm
7.2; 7.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-4381
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-4381
Broken Link
http://www.securityfocus.com/bid/108808
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/162159
Patch
https://www.ibm.com/support/docview.wss?uid=ibm10887369
More from I
10.0
CVE-2026-18193
IBM i Is Affected By Multiple Vulnerabilities in IBM Java SDK and IBM Java Runtime
9.9
CVE-2026-96119
IBM i is Affected By An Improper Control of Code Generation Vulnerability in HTTP Server Administration GUI
9.9
CVE-2026-18249
IBM i Is Affected By Multiple Vulnerabilities in IBM Java SDK and IBM Java Runtime
9.9
CVE-2026-16860
IBM i is Affected By Remote Code Execution Vulnerability []
9.9
CVE-2026-17276
IBM i is Affected By Multiple Vulnerabilities in Navigator for i