PT-2019-9688 · Ibm · Ibm Infosphere Information Server

Published 2019-03-05 · Updated 2019-10-09 · CVE-2018-1899

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 11.3, 11.5, and 11.7

Description The issue is related to improper access control, which could allow an attacker to change settings related to InfoSphere Business Glossary Anywhere.

Recommendations For versions 11.3, 11.5, and 11.7, update to a version that includes the fix for this issue, as no specific workaround is provided.

Fix

Related Identifiers

CVE-2018-1899

Affected Products

Ibm Infosphere Information Server

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-1899 · Security Note
• https://osv.dev/vulnerability/CVE-2018-1899 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=ibm10744029 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/152528 · Vendor Advisory