PT-2018-12194
CVE-2018-1380
·
Published
2018-10-29
·
Updated
2019-10-09
Description by
CVSS 3.1
4.9
MediumMetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM InfoSphere Master Data Management Collaboration Server versions 11.4 through 11.6
Description
The issue allows an authenticated user with CA level access to change their
ca-id to another user's, potentially enabling them to read sensitive information.Recommendations
For versions 11.4 through 11.6, restrict access to CA level functions to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾