CVE-2018-1906: Medium severity sap information steward vulnerability

Published Apr 2, 2019

Updated

IBM InfoSphere Information Server 11.3, 11.5, and 11.7could allow an authenticated user to download code using a specially crafted HTTP request. IBM X-Force ID: 152663.

Affected Software

5 affected components

IBM InfoSphere Information Server=11.3

IBM InfoSphere Information Server=11.5

IBM InfoSphere Information Server=11.7

IBM Infosphere Information Server On Cloud=11.5

IBM Infosphere Information Server On Cloud=11.7

Event History

Apr 2, 2019

CVE Published

via MITRE·01:20 PM

Data Sourced

via MITRE·01:20 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2018-1906?

CVE-2018-1906 is a vulnerability in IBM InfoSphere Information Server 11.3, 11.5, and 11.7 that could allow an authenticated user to download code using a specially crafted HTTP request.

What is the severity of CVE-2018-1906?

The severity of CVE-2018-1906 is medium with a severity value of 6.5.

Which versions of IBM InfoSphere Information Server are affected by CVE-2018-1906?

CVE-2018-1906 affects IBM InfoSphere Information Server versions 11.3, 11.5, and 11.7.

How can an authenticated user exploit CVE-2018-1906?

An authenticated user can exploit CVE-2018-1906 by sending a specially crafted HTTP request to download code.

Are there any references for CVE-2018-1906?

Yes, you can find references for CVE-2018-1906 at the following links: [Security Focus](http://www.securityfocus.com/bid/107735) and [IBM X-Force](https://exchange.xforce.ibmcloud.com/vulnerabilities/152663).