CVE-2018-1891: XSS
IBM Security Guardium 10 and 10.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152082.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-1891?
CVE-2018-1891 has a medium severity rating due to the risk of cross-site scripting leading to potential credential disclosure.
How do I fix CVE-2018-1891?
To fix CVE-2018-1891, upgrade IBM Security Guardium to a version that is not affected, specifically version 10.6 or later.
What systems are affected by CVE-2018-1891?
CVE-2018-1891 affects IBM Security Guardium versions 10.0 to 10.5.
What type of vulnerability is CVE-2018-1891?
CVE-2018-1891 is classified as a cross-site scripting (XSS) vulnerability.
What potential impact does CVE-2018-1891 have on users?
CVE-2018-1891 can allow attackers to execute arbitrary JavaScript in the web interface, which may lead to credential theft during a trusted session.