CVE-2018-1453

EPSS 0.33%
Published 08.06.2018 13:29:00
Last modified 21.11.2024 03:59:50
Source psirt@us.ibm.com
Teams watchlist Login
Open Login

IBM Security Identity Manager Virtual Appliance 7.0 allows an authenticated attacker to upload or transfer files of dangerous types that can be automatically processed within the environment. IBM X-Force ID: 140055.

Affected products Warnungen 0 Metrics 4 CWE 1 References 6

Data is provided by the National Vulnerability Database (NVD)

Ibm ≫ Security Identity Manager Version7.0

Ibm ≫ Security Identity Manager Version7.0.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.33%	0.555

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	8.8	2.8	5.9	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	6.5	8	6.4	AV:N/AC:L/Au:S/C:P/I:P/A:P
psirt@us.ibm.com	8.8	2.8	5.9	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

http://www.ibm.com/support/docview.wss?uid=swg22013617

Patch

Vendor Advisory

http://www.securitytracker.com/id/1041383

Third Party Advisory

VDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/140055

Vendor Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2018-1453

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-1453

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-1453

EUVD