PT-2018-13883
CVE-2018-1708
·
Published
2018-10-11
·
Updated
2019-10-09
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Spectrum Symphony versions 7.1.2 through 7.2.0.2
Description
The issue allows an authenticated user to obtain sensitive user information, such as passwords, through the WebUI.
Recommendations
For versions 7.1.2 and 7.2.0.2, consider restricting access to the WebUI to minimize the risk of exploitation until a fix is available.
Found an issue in the description? Have something to add? Feel free to write us 👾