CVE-2018-1453 — Unrestricted File Upload in IBM Security Identity Manager

CWE-434 — Unrestricted File Upload3 documents3 sources
Severity
8.8HIGHNVD
EPSS
0.3%
top 45.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Security Identity Manager
Timeline
PublishedJun 8
Latest updateMay 13

Description

IBM Security Identity Manager Virtual Appliance 7.0 allows an authenticated attacker to upload or transfer files of dangerous types that can be automatically processed within the environment. IBM X-Force ID: 140055.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-r959-p85p-c67w: IBM Security Identity Manager Virtual Appliance 7↗2022-05-13
▶
CVEList
CVE-2018-1453: IBM Security Identity Manager Virtual Appliance 7↗2018-06-08
▶
CVE-2018-1453 — Unrestricted File Upload in IBM | cvebase