Information Disclosure Vulnerability in IBM Platform Symphony and Spectrum Symphony
CVE-2018-1705

6.5MEDIUM

Key Information:

Vendor

IBM
Status
Platform Symphony
Spectrum Symphony
Vendor
CVE Published:
28 August 2018

What is CVE-2018-1705?

IBM Platform Symphony and Spectrum Symphony contain a vulnerability that allows authenticated attackers to access sensitive information. This exposure can lead to the compromise of confidential data, thereby posing significant risks to the integrity and confidentiality of the affected systems. It is crucial for organizations using these products to ensure they are adequately secured against this vulnerability.

Affected Version(s)

Platform Symphony 7.1.1

Platform Symphony 7.1

Spectrum Symphony 7.2.0.2

References

https://www.ibm.com/support/docview.wss?uid=ibm10719665
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/146340
vdb-entryx_refsource_XF

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2018-1705 : Information Disclosure Vulnerability in IBM Platform Symphony and Spectrum Symphony