CVE-2018-1388

HIGH

IBM WebSphere MQ - Exposure of Sensitive Information via PKCS#1 Padding Side Channel

Title source: llm

GSKit V7 may disclose side channel information via discrepancies between valid and invalid PKCS#1 padding. IBM X-Force ID: 138212.

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

Mitigation, Vendor Advisory x_refsource_confirm

VDB Entry, Vendor Advisory x_refsource_misc

CVSS v3 7.5

EPSS 0.0219

EPSS Percentile 80.2%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-200

Status published

Products (15)

ibm/websphere_mq 7.0.1.0

ibm/websphere_mq 7.0.1.1

ibm/websphere_mq 7.0.1.2

ibm/websphere_mq 7.0.1.3

ibm/websphere_mq 7.0.1.4

ibm/websphere_mq 7.0.1.5

ibm/websphere_mq 7.0.1.6

ibm/websphere_mq 7.0.1.7

ibm/websphere_mq 7.0.1.8

ibm/websphere_mq 7.0.1.9

... and 5 more

Published Feb 07, 2018

Tracked Since Feb 18, 2026