CVE-2018-1756: SQL Injection

Published Aug 27, 2018

Updated

IBM Security Identity Governance and Intelligence 5.2.3.2 and 5.2.4 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, information in the back-end database. IBM X-Force ID: 148599.

Affected Software

2 affected components

IBM Security Identity Governance and Intelligence=5.2.3.2

IBM Security Identity Governance and Intelligence=5.2.4

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=ibm10728883

Event History

Sep 7, 2018

CVE Published

03:29 PM

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2018-1756?

CVE-2018-1756 is a vulnerability in IBM Security Identity Governance and Intelligence 5.2.3.2 and 5.2.4 that allows a remote attacker to perform SQL injection attacks.

How does CVE-2018-1756 affect IBM Security Identity Governance and Intelligence?

CVE-2018-1756 affects IBM Security Identity Governance and Intelligence 5.2.3.2 and 5.2.4 by allowing a remote attacker to send specially-crafted SQL statements to view information in the back-end database.

What is the severity of CVE-2018-1756?

CVE-2018-1756 has a severity rating of 7.5 (high).

How can I fix CVE-2018-1756?

To fix CVE-2018-1756, it is recommended to apply the necessary security updates released by IBM.

Is there any additional information about CVE-2018-1756?

Yes, you can find additional information about CVE-2018-1756 on the IBM support website, IBM X-Force ID 148599, and the Exploit Database.