PT-2018-13862 · Ibm · Ibm Spectrum Symphony+1

Andrea Scaduto + 1 · Publicado 2018-08-28 · Atualizado 2019-10-09 · CVE-2018-1705

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Platform Symphony versions 7.1 Fix Pack 1 through 7.1.1 IBM Spectrum Symphony versions 7.1.2 through 7.2.0.2

Description The issue is an information disclosure vulnerability that could allow an authenticated attacker to obtain highly sensitive information.

Recommendations For IBM Platform Symphony versions 7.1 Fix Pack 1 through 7.1.1, update to a version that contains the fix for this issue. For IBM Spectrum Symphony versions 7.1.2 through 7.2.0.2, update to a version that contains the fix for this issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2018-1705

Produtos afetados

Ibm Platform Symphony

Ibm Spectrum Symphony

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-1705 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-1705 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/146340 · Aviso do Fabricante
• https://ibm.com/support/docview.wss?uid=ibm10719665 · Aviso do Fabricante