CVE-2018-1813

3 documents3 sources

Severity

6.5MEDIUM

EPSS

0.1%

top 68.09%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Security Access Manager IBM Security Access Manager Appliance

Timeline

PublishedDec 13

Latest updateMay 13

Description

IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 150017.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5ibm/security_access_manager_appliance5 versions+4

▶NVDibm/security_access_manager9.0.1.0 — 9.0.5.0

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

GHSA

GHSA-jgm8-vvh4-72gh: IBM Security Access Manager Appliance 9↗2022-05-13

▶

CVEList

CVE-2018-1813: IBM Security Access Manager Appliance 9↗2018-12-13

▶