Remote Command Execution Vulnerability in IBM Security Privileged Identity Manager
CVE-2018-1640

8.8HIGH

Key Information:

Vendor
IBM
Status
Security Privileged Identity Manager
Vendor
CVE Published:
2 April 2019

Summary

IBM Security Privileged Identity Manager Virtual Appliance version 2.2.1 is susceptible to a remote command execution vulnerability. An authenticated attacker can exploit this flaw by sending a specially-crafted request to the system, enabling them to execute arbitrary commands. This poses significant risks to system integrity and data security, highlighting the necessity for immediate patching and mitigation strategies.

Affected Version(s)

Security Privileged Identity Manager 2.1.1

References

http://www.ibm.com/support/docview.wss?uid=ibm10879093
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/144580
vdb-entryx_refsource_XF

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.