Local File Exposure in IBM Security Privileged Identity Manager Virtual Appliance
CVE-2018-1623

4MEDIUM

Key Information:

Vendor

IBM
Status
Security Privileged Identity Manager
Vendor
CVE Published:
2 April 2019

What is CVE-2018-1623?

The IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 has a security vulnerability that allows an attacker to store web pages locally. These stored pages can be accessed by unauthorized users on the same system, potentially exposing sensitive information. This vulnerability affects the integrity and confidentiality of the data processed by the application, making it crucial to apply appropriate mitigations.

Affected Version(s)

Security Privileged Identity Manager 2.1.1

References

http://www.ibm.com/support/docview.wss?uid=ibm10879093
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/144408
vdb-entryx_refsource_XF

CVSS V3.1

Score:
4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.