CVEvulnerability
CVE-2018-1899
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-03-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 4.3 MEDIUM — CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- CVSS 3.0 ([email protected])
- 4.3 MEDIUM — CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- CVSS 2.0 ([email protected])
- 3.3 LOW — AV:A/AC:L/Au:N/C:N/I:P/A:N
Description
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an attacker to change one of the settings related to InfoSphere Business Glossary Anywhere due to improper access control. IBM X-Force ID: 152528.
Affected configurations
• ibm infosphere information governance catalog 11.3
• ibm infosphere information governance catalog 11.5
• ibm infosphere information governance catalog 11.7
• ibm infosphere information server on cloud 11.5
• ibm infosphere information server on cloud 11.7
References
- http://www.ibm.com/support/docview.wss?uid=ibm10744029 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/152528 VDB Entry, Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=ibm10744029 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/152528 VDB Entry, Vendor Advisory