cbcvebase.
CVE-2018-1380
published 2018-10-29

CVE-2018-1380: IBM InfoSphere Master Data Management Collaboration Server 11.4, 11.5, and 11.6 could allow an authenticated user with CA level access to change change their…

PriorityP424medium4.9CVSS 3.0
AVNACLPRHUINSUCHINAN
EPSS
1.07%
61.3th percentile
IBM InfoSphere Master Data Management Collaboration Server 11.4, 11.5, and 11.6 could allow an authenticated user with CA level access to change change their ca-id to another users and read sensitive information. IBM X-Force ID: 138077.

Affected

6 ranges
VendorProductVersion rangeFixed in
ibminfosphere_master_data_management——
ibminfosphere_master_data_management——
ibminfosphere_master_data_management——
ibminfosphere_master_data_management_collaboration_server——
ibminfosphere_master_data_management_collaboration_server——
ibminfosphere_master_data_management_collaboration_server——

CVSS provenance

nvdv3.04.9MEDIUMCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.