CVE-2018-1518

CWE-3263 documents3 sources

Severity

5.5MEDIUM

EPSS

0.0%

top 98.72%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Infosphere Information Server IBM Infosphere Information Server ON Cloud

Timeline

PublishedOct 18

Latest updateMay 13

Description

IBM InfoSphere Information Server 11.7 is affected by a weak password encryption vulnerability that could allow a local user to obtain highly sensitive information. IBM X-Force ID: 141682.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 2.5 | Impact: 3.6

Affected Packages3 packages

▶CVEListV5ibm/infosphere_information_server11.7

▶NVDibm/infosphere_information_server11.7

▶NVDibm/infosphere_information11.7

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

GHSA

GHSA-hvfg-6x3x-xrpq: IBM InfoSphere Information Server 11↗2022-05-13

▶

CVEList

CVE-2018-1518: IBM InfoSphere Information Server 11↗2018-10-18

▶