CVE-2018-1944: Critical severity ibm security identity governance and intelligence vulnerability

Q: What is CVE-2018-1944?

CVE-2018-1944 is a vulnerability in IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance that allows an attacker to gain unauthorized access to the system.

Q: How severe is CVE-2018-1944?

CVE-2018-1944 has a severity rating of 9.8, which is classified as critical.

Q: What is the affected software for CVE-2018-1944?

The affected software for CVE-2018-1944 is IBM Security Identity Governance and Intelligence version 5.2 through 5.2.4.1 Virtual Appliance.

Q: What is the CWE-ID for CVE-2018-1944?

The CWE-ID for CVE-2018-1944 is 798.

Q: How do I fix CVE-2018-1944?

To fix CVE-2018-1944, upgrade to a version of IBM Security Identity Governance and Intelligence that is not affected by this vulnerability.

Published Feb 21, 2019

Updated

IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 153386.

Affected Software

1 affected component

IBM Security Identity Governance and Intelligence>=5.2<=5.2.4.1

Remediation

Patch Available

https://www.ibm.com/support/docview.wss?uid=ibm10872142

Event History

Feb 21, 2019

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2018-1944?

CVE-2018-1944 is a vulnerability in IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance that allows an attacker to gain unauthorized access to the system.

How severe is CVE-2018-1944?