CVE-2019-4092: IBM Content Navigator 2.0.3 and 3.0CD could allow a remote attacker to conduct phishing attacks, using an o...

Security readout for executives and security teams

IBM Content Navigator 2.0.3 and 3.0CD can be abused for phishing through an open redirect. An attacker could make a trusted-looking link send a user to a malicious site. The main business risk is credential theft or follow-on compromise, not direct system takeover. Exposure is limited to IBM Content Navigator 2.0.3 and 3.0CD according to the supplied sources. Risk is higher where users access the service through email links, portals, or internet-facing entry points. Treat this as a moderate-priority remediation, especially for public-facing or sensitive document environments. It can support convincing phishing but does not indicate direct server compromise in the supplied evidence. Mitigation focus: Review IBM advisory 10874754 for the vendor-approved fix path.; Apply IBM-recommended updates or fixes for affected Content Navigator versions.; Reduce exposure of affected portals where business use allows..

Prepared

May 24, 2026, 12:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.