CVE-2018-1476

CWE-200 — Information Exposure4 documents4 sources
Severity
7.5HIGH
EPSS
0.2%
top 60.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Bigfix Platform
Timeline
PublishedDec 12
Latest updateMay 13

Description

IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 140757.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

▶NVDibm/bigfix_platform9.2 — 9.2.14+1
▶CVEListV5ibm/bigfix_platform4 versions+3

🔴Vulnerability Details

2
GHSA
GHSA-vvwh-jmxg-gm6f: IBM BigFix Platform 9↗2022-05-13
▶
CVEList
CVE-2018-1476: IBM BigFix Platform 9↗2018-12-12
▶

💬Community

1
Bugzilla
CVE-2018-16646 poppler: infinite recursion in Parser::getObj function in Parser.cc↗2018-09-07
▶
CVE-2018-1476 (HIGH CVSS 7.5) | IBM BigFix Platform 9.2.0 through 9 | cvebase.io