CVE-2018-1999: Infoleak
IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could reveal sensitive version information about the server from error pages that could aid an attacker in further attacks against the system. IBM X-Force ID: 154889.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID of this security vulnerability?
The vulnerability ID of this vulnerability is CVE-2018-1999.
What is the severity level of CVE-2018-1999?
The severity level of CVE-2018-1999 is medium.
Which IBM product is affected by CVE-2018-1999?
IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 are affected by CVE-2018-1999.
How can an attacker exploit CVE-2018-1999?
An attacker can exploit CVE-2018-1999 by using the sensitive version information revealed from error pages to launch further attacks against the system.
Where can I find more information about CVE-2018-1999?
You can find more information about CVE-2018-1999 at the following references: [link1](https://exchange.xforce.ibmcloud.com/vulnerabilities/154889) and [link2](https://www.ibm.com/support/docview.wss?uid=ibm10870502).