PT-2018-9480 · Battelle · Battelle V2I Hub

Published 2018-12-28 · Updated 2019-10-03 · CVE-2018-1000627

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Battelle V2I Hub version 2.5.1

Description The issue is caused by the failure to restrict access to the API key file, allowing a remote attacker to obtain sensitive information. This could be exploited to gain unauthorized access to the system by obtaining the current API key.

Recommendations For version 2.5.1, restrict access to the API key file to prevent unauthorized access.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2018-1000627

Affected Products

Battelle V2I Hub

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-1000627 · Security Note
• https://osv.dev/vulnerability/CVE-2018-1000627 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/147304 · Note