CVE-2018-1625

CWE-200 — Information Exposure3 documents3 sources

Severity

4.3MEDIUM

EPSS

0.1%

top 69.17%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Security Privileged Identity Manager

Timeline

PublishedApr 2

Latest updateMay 13

Description

IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 144410.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5ibm/security_privileged_identity_manager2.1.1

▶NVDibm/security_privileged_identity_manager2.1.1

🔴Vulnerability Details

GHSA

GHSA-9mj3-v432-xjpv: IBM Security Privileged Identity Manager Virtual Appliance 2↗2022-05-13

▶

CVEList

CVE-2018-1625: IBM Security Privileged Identity Manager Virtual Appliance 2↗2019-04-02

▶