CVE-2018-1454: Medium severity sap information steward vulnerability

Published Jun 5, 2018

Updated

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 140089.

Affected Software

3 affected components

IBM InfoSphere Information Server=11.3

IBM InfoSphere Information Server=11.5

IBM InfoSphere Information Server=11.7

Event History

Jun 5, 2018

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2018-1454?

CVE-2018-1454 is considered a medium severity vulnerability due to its potential to expose sensitive information.

How do I fix CVE-2018-1454?

To fix CVE-2018-1454, ensure that HTTP Strict Transport Security is properly enabled on your IBM InfoSphere Information Server installations.

What are the affected versions of CVE-2018-1454?

CVE-2018-1454 affects IBM InfoSphere Information Server versions 11.3, 11.5, and 11.7.

What is the impact of CVE-2018-1454?

The impact of CVE-2018-1454 is that it allows remote attackers to perform man-in-the-middle attacks and obtain sensitive information.

Is there a workaround for CVE-2018-1454?

Currently, the recommended method to mitigate CVE-2018-1454 is to apply the proper configuration of HTTP Strict Transport Security.