CVE-2018-1906

IBM InfoSphere Information Server 11.3, 11.5, and 11.7could allow an authenticated user to download code using a specially crafted HTTP request. IBM X-Force ID: 152663.

Published: Apr 2, 2019
Updated: Apr 13, 2023
CVE: CVE-2018-1906
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 6.5
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS v2:

Severity: Low
Score: 4
AV:N/AC:L/Au:S/C:P/I:N/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
ibm / infosphere_information_server	11.3	11.3.x
ibm / infosphere_information_server_on_cloud	11.5	11.5.x
ibm / infosphere_information_server	11.5	11.5.x
ibm / infosphere_information_server	11.7	11.7.x
ibm / infosphere_information_server_on_cloud	11.7	11.7.x

http://www.securityfocus.com/bid/107735
https://exchange.xforce.ibmcloud.com/vulnerabilities/152663
https://www.ibm.com/support/docview.wss?uid=ibm10872320

Vulnerability Database

CVE-2018-1906

Deep Security Visibility Without the Complexity