A vulnerability has been identified in tasks, backend object generated for handling any action performed by the application in IBM Cloud Orchestrator. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.
IBM
Information Disclosure
Cloud Orchestrator
NVD
CVSS 3.0
3.3
EPSS
0.1%
IBM Cloud Orchestrator could allow a local authenticated attacker to cause the server to slow down for a short period of time by using a specially crafted and malformed URL. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity.
IBM
Information Disclosure
Cloud Orchestrator
NVD
CVSS 3.0
3.3
EPSS
0.1%
A vulnerability has been identified in IBM Cloud Orchestrator services/[action]/launch API. Rated low severity (CVSS 2.8).
IBM
Authentication Bypass
Cloud Orchestrator
Smartcloud Orchestrator
NVD
CVSS 3.0
2.8
EPSS
0.0%