CVE-2018-1370

CWE-732 — Incorrect Permission Assignment4 documents4 sources
Severity
5.4MEDIUM
EPSS
0.1%
top 79.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Security Guardium BIG Data Intelligence
Timeline
PublishedMay 29
Latest updateMay 13

Description

IBM Security Guardium Big Data Intelligence (SonarG) 3.1 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 137769.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:NExploitability: 1.6 | Impact: 2.5

Affected Packages2 packages

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-p84f-5rq9-rp49: IBM Security Guardium Big Data Intelligence (SonarG) 3↗2022-05-13
▶
CVEList
CVE-2018-1370: IBM Security Guardium Big Data Intelligence (SonarG) 3↗2018-05-29
▶

💥Exploits & PoCs

1
Exploit-DB
LibreOffice < 6.0.1 - '=WEBSERVICE' Remote Arbitrary File Disclosure↗2018-02-10
▶
CVE-2018-1370 (MEDIUM CVSS 5.4) | IBM Security Guardium Big Data Inte | cvebase.io