CVE-2018-1969 — Unrestricted File Upload in IBM Security Identity Manager

CWE-434 — Unrestricted File Upload3 documents3 sources
Severity
9.9CRITICALNVD
CNA9.0
EPSS
0.3%
top 46.33%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Security Identity Manager
Timeline
PublishedJan 14
Latest updateMay 13

Description

IBM Security Identity Manager 6.0.0 allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. IBM X-Force ID: 153750.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HExploitability: 3.1 | Impact: 6.0

Affected Packages2 packages

▶NVDibm/security_identity_manager6.0.0 — 6.0.0.20

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-jm3r-w543-q5j2: IBM Security Identity Manager 6↗2022-05-13
▶
CVEList
CVE-2018-1969: IBM Security Identity Manager 6↗2019-01-14
▶