CVE-2018-1938

CWE-3113 documents3 sources
Severity
4.4MEDIUM
EPSS
0.0%
top 92.86%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Cloud Private
Timeline
PublishedMar 5
Latest updateMay 13

Description

IBM Cloud Private 3.1.1 could alllow a local user with administrator privileges to intercept highly sensitive unencrypted data. IBM X-Force ID: 153318.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NExploitability: 0.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5ibm/cloud_private3.1.1

🔴Vulnerability Details

2
GHSA
GHSA-8hg5-pmmm-c932: IBM Cloud Private 3↗2022-05-13
▶
CVEList
CVE-2018-1938: IBM Cloud Private 3↗2019-03-05
▶
CVE-2018-1938 (MEDIUM CVSS 4.4) | IBM Cloud Private 3.1.1 could alllo | cvebase.io