CVE-2019-4381: IBM i 7.27.3 Clustering could allow a local attacker to obtain sensitive information, caused by the use of...

Security readout for executives and security teams

This issue affects IBM i Clustering as described in the source bundle. A local attacker could obtain sensitive HMC credentials when advanced node failure detection uses the REST API to interface with HMC. The main business concern is credential exposure, not system takeover through this CVE alone. Exposure is most likely on IBM i systems using the affected Clustering version and advanced node failure detection with HMC REST API integration. Systems not using that clustering path or HMC integration are not shown as affected by the provided sources. Treat this as a moderate-priority credential exposure issue. It is not reported as actively exploited in the provided sources, but HMC credential disclosure can increase operational risk for environments dependent on IBM i clustering. Mitigation focus: Review IBM advisory guidance for applicable fixes or configuration changes.; Inventory IBM i Clustering deployments using HMC REST API integration.; Limit local access to IBM i systems to trusted administrators..

Prepared

May 25, 2026, 05:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.