Local File Read Vulnerability in IBM i2 Enterprise Insight Analysis
CVE-2018-1505

4MEDIUM

Key Information:

Vendor

IBM
Status
I2 Enterprise Insight Analysis
Vendor
CVE Published:
6 December 2018

What is CVE-2018-1505?

IBM i2 Enterprise Insight Analysis version 2.1.7 contains a vulnerability that allows web pages to be stored locally on the system. This stored data can potentially be accessed by unauthorized users, leading to data exposure. This issue highlights the need for proper access controls and data handling mechanisms within the application to prevent unauthorized access to sensitive information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

i2 Enterprise Insight Analysis 2.1.7

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/141413
vdb-entryx_refsource_XF
https://www.ibm.com/support/docview.wss?uid=ibm10738699
x_refsource_CONFIRM

CVSS V3.1

Score:
4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.