CVE-2018-1411
First published: Mon Feb 19 2018(Updated: )
IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on the system. By crafting a command line sent via the shared memory IPC, which could be tricked into executing an executable chosen by the attacker. IBM X-Force ID: 138710.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Notes | =8.5.1.5 | |
| IBM Notes | =8.5.2.4 | |
| IBM Notes | =8.5.3.6 | |
| IBM Notes | =9.0 | |
| IBM Notes | =9.0.1.9 | |
| IBM Client Application Access | =1.0.0.1 | |
| IBM Client Application Access | =1.0.1 | |
| IBM Client Application Access | =1.0.1.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2018-1411.
What is the severity level of CVE-2018-1411?
The severity level of CVE-2018-1411 is high with a value of 7.8.
Which software versions are affected by CVE-2018-1411?
CVE-2018-1411 affects IBM Notes versions 8.5.1.5, 8.5.2.4, 8.5.3.6, 9.0, 9.0.1.9, and IBM Client Application Access versions 1.0.0.1, 1.0.1, 1.0.1.2.
How can a local user exploit this vulnerability?
A local user can exploit this vulnerability by crafting a command line sent via the shared memory IPC, which could be tricked into executing an executable chosen by the attacker.
Where can I find more information about CVE-2018-1411?
You can find more information about CVE-2018-1411 on the following links: 1. [IBM Support: CVE-2018-1411](http://www.ibm.com/support/docview.wss?uid=swg22010766) 2. [IBM Support: CVE-2018-1411](http://www.ibm.com/support/docview.wss?uid=swg22010767) 3. [IBM X-Force ID: 138710](https://exchange.xforce.ibmcloud.com/vulnerabilities/138710)
- collector/nvd-index
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/ibm
- canonical/ibm notes
- version/ibm notes/8.5.1.5
- version/ibm notes/8.5.2.4
- version/ibm notes/8.5.3.6
- version/ibm notes/9.0
- version/ibm notes/9.0.1.9
- canonical/ibm client application access
- version/ibm client application access/1.0.0.1
- version/ibm client application access/1.0.1
- version/ibm client application access/1.0.1.2