CVE-2018-1899

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an attacker to change one of the settings related to InfoSphere Business Glossary Anywhere due to improper access control. IBM X-Force ID: 152528.

Published: Mar 5, 2019
Updated: Apr 13, 2023
CVE: CVE-2018-1899
Severity: Low
Exploit:

CVSS v3:

Severity: Low
Score: 4.3
AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CVSS v2:

Severity: Low
Score: 3.3
AV:A/AC:L/Au:N/C:N/I:P/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
ibm / infosphere_information_governance_catalog	11.3	11.3.x
ibm / infosphere_information_governance_catalog	11.5	11.5.x
ibm / infosphere_information_server_on_cloud	11.5	11.5.x
ibm / infosphere_information_server_on_cloud	11.7	11.7.x
ibm / infosphere_information_governance_catalog	11.7	11.7.x

http://www.ibm.com/support/docview.wss?uid=ibm10744029
https://exchange.xforce.ibmcloud.com/vulnerabilities/152528

Vulnerability Database

289,784

CVE-2018-1899