Back
CVE-2019-4234
IBM PureApplication System 2.2.3.0 through 2.2.5.3 weakness in the implementation of locking feature in pattern editor. An attacker by…
Medium4.3EPSS 0.88%
- Published
- Updated
- Reserved
- Assigned by
- ibm
Description
IBM PureApplication System 2.2.3.0 through 2.2.5.3 weakness in the implementation of locking feature in pattern editor. An attacker by intercepting the subsequent requests can bypass business logic to modify the pattern to unlocked state. IBM X-Force ID: 159416.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| ibmCNA (assigner) | 3.0 | Medium4.3 | CVSS:3.0/C:N/AV:N/S:U/PR:L/A:N/AC:L/I:L/UI:N/RC:C/E:U/RL:O |
| NVDNVD · Modified | 3.1 | Medium4.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N |
- EPSS (exploitation in 30 days)
- 0.88% · top 41% of all CVEs (6 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.3.
Weakness
- Gain Access
Affected products
- affected 2.2.3.0
- affected 2.2.3.1
- affected 2.2.3.2
- affected 2.2.4.0
- affected 2.2.5.0
- affected 2.2.5.1
- affected 2.2.5.2
- affected 2.2.5.3
References (2)
- https://www-01.ibm.com/support/docview.wss?uid=ibm10885602 (opens in a new tab)x_refsource_CONFIRMx_transferred
- ibm-pure-cve20194234-gain-access (159416) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2019-4234)Record last updated .