CVE-2018-1387: Infoleak

Published Mar 8, 2018

Updated

IBM Application Performance Management for Monitoring & Diagnostics (IBM Monitoring 8.1.3 and 8.1.4) may release sensitive personal data to the staff who can access to the database of this product. IBM X-Force ID: 138210.

Affected Software

5 affected components

IBM Application Performance Management=8.1.4.0

IBM Cloud Apm Data Collector=7.3

IBM Cloud Apm Data Collector=7.4

IBM Monitoring=8.1.3.0

IBM Monitoring=8.1.4.0

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg22014035

Event History

Mar 8, 2018

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2018-1387?

CVE-2018-1387 has a medium severity rating due to potential exposure of sensitive personal data.

How do I fix CVE-2018-1387?

To fix CVE-2018-1387, update to the latest versions of affected IBM products as they contain security patches.

What versions are affected by CVE-2018-1387?

CVE-2018-1387 affects IBM Application Performance Management versions 8.1.3, 8.1.4, and specific versions of IBM Cloud APM Data Collector.

What type of data is exposed in CVE-2018-1387?

CVE-2018-1387 may expose sensitive personal data accessible to staff with database access.

Is CVE-2018-1387 still a risk if we are not on the affected versions?

If you are not using the affected versions of IBM Application Performance Management, CVE-2018-1387 should not pose a risk.