CVE-2018-1805

CWE-200 — Information Exposure8 documents4 sources

Severity

4.3MEDIUM

EPSS

0.1%

top 69.17%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Security Access Manager IBM Security Access Manager Appliance

Timeline

PublishedDec 13

Latest updateMay 13

Description

IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 149704.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5ibm/security_access_manager_appliance5 versions+4

▶NVDibm/security_access_manager9.0.1.0 — 9.0.5.0

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

GHSA

GHSA-465h-rh6x-gqc5: IBM Security Access Manager Appliance 9↗2022-05-13

▶

CVEList

CVE-2018-1805: IBM Security Access Manager Appliance 9↗2018-12-13

▶