CVE-2018-1814

CWE-3263 documents3 sources

Severity

7.5HIGH

EPSS

0.1%

top 70.36%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Security Access Manager IBM Security Access Manager Appliance

Timeline

PublishedDec 13

Latest updateMay 13

Description

IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 150018.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 2.2 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5ibm/security_access_manager_appliance5 versions+4

▶NVDibm/security_access_manager9.0.1.0 — 9.0.5.0

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

GHSA

GHSA-j4q5-px5w-x7c7: IBM Security Access Manager Appliance 9↗2022-05-13

▶

CVEList

CVE-2018-1814: IBM Security Access Manager Appliance 9↗2018-12-13

▶