PT-2018-12237 · Ibm · Ibm Application Performance Management

Published 2018-03-08 · Updated 2019-10-09 · CVE-2018-1387

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N

Name of the Vulnerable Software and Affected Versions IBM Application Performance Management for Monitoring & Diagnostics versions 8.1.3 through 8.1.4

Description The issue may result in the release of sensitive personal data to staff who have access to the product's database.

Recommendations For versions 8.1.3 and 8.1.4, restrict access to the database to minimize the risk of sensitive data exposure.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2018-1387

Affected Products

Ibm Application Performance Management

References · 5

• https://osv.dev/vulnerability/CVE-2018-1387 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1387 · Security Note
• http://ibm.com/support/docview.wss?uid=swg22014035 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/138210 · Vendor Advisory
• http://securityfocus.com/bid/103403 · Note