CVE-2018-1917: Infoleak
First published: Tue Apr 02 2019(Updated: )
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an authenticated user to access JSP files and disclose sensitive information. IBM X-Force ID: 152784.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ibm Infosphere Information Server | =11.3 | |
| Ibm Infosphere Information Server | =11.5 | |
| Ibm Infosphere Information Server | =11.7 | |
| Ibm Infosphere Information Server On Cloud | =11.5 | |
| Ibm Infosphere Information Server On Cloud | =11.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-1917?
The severity of CVE-2018-1917 is medium.
How does CVE-2018-1917 affect IBM InfoSphere Information Server?
CVE-2018-1917 allows an authenticated user to access JSP files and disclose sensitive information on IBM InfoSphere Information Server 11.3, 11.5, and 11.7.
Which versions of IBM InfoSphere Information Server are affected by CVE-2018-1917?
CVE-2018-1917 affects IBM InfoSphere Information Server versions 11.3, 11.5, and 11.7.
Can an authenticated user exploit CVE-2018-1917?
Yes, an authenticated user can exploit CVE-2018-1917 to access JSP files and disclose sensitive information.
How can I mitigate CVE-2018-1917 on IBM InfoSphere Information Server?
To mitigate CVE-2018-1917 on IBM InfoSphere Information Server, apply the necessary security patches or updates provided by IBM.
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/event
- agent/type
- agent/description
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/ibm
- canonical/ibm infosphere information server
- version/ibm infosphere information server/11.3
- version/ibm infosphere information server/11.5
- version/ibm infosphere information server/11.7
- canonical/ibm infosphere information server on cloud
- version/ibm infosphere information server on cloud/11.5
- version/ibm infosphere information server on cloud/11.7