Remote Command Execution Vulnerability in IBM Security Privileged Identity Manager
CVE-2018-1640
8.8HIGH
Key Information:
- Vendor
- IBM
- Vendor
- CVE Published:
- 2 April 2019
Summary
IBM Security Privileged Identity Manager Virtual Appliance version 2.2.1 is susceptible to a remote command execution vulnerability. An authenticated attacker can exploit this flaw by sending a specially-crafted request to the system, enabling them to execute arbitrary commands. This poses significant risks to system integrity and data security, highlighting the necessity for immediate patching and mitigation strategies.
Affected Version(s)
Security Privileged Identity Manager 2.1.1
References
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved