PT-2018-12194
CVE-2018-1380
·
تاريخ النشر
2018-10-29
·
تاريخ التحديث
2019-10-09
الوصف من
CVSS 3.1
4.9
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM InfoSphere Master Data Management Collaboration Server versions 11.4 through 11.6
Description
The issue allows an authenticated user with CA level access to change their
ca-id to another user's, potentially enabling them to read sensitive information.Recommendations
For versions 11.4 through 11.6, restrict access to CA level functions to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾