IBM Security Bulletin: IBM Cloud Automation Manager is affected by a forbidden resouce redirect for bad API path CVE-2019-4132

IBM Cloud Automation Manager will redirect when a bad API path is requested rather than issuing a 404. User may expect an error but be redirected to a home page instead.

CVE(s): CVE-2019-4132

Affected product(s) and affected version(s):
IBM Cloud Automation Manager 3.1.2

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10967477
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/158274

The post IBM Security Bulletin: IBM Cloud Automation Manager is affected by a forbidden resouce redirect for bad API path CVE-2019-4132 appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2HnH3nv