CVE-2018-1950
MEDIUMIBM Security Identity Governance And Intelligence < 5.2.4.1 - Information Disclosure
Title source: ruleDescription
IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance generates an error message that includes sensitive information about its environment, users, or associated data which could be used in further attacks against the system. IBM X-Force ID: 153430.
References (2)
Core 2
Core References
Patch, Vendor Advisory x_refsource_confirm
https://www.ibm.com/support/docview.wss?uid=ibm10872142
VDB Entry, Vendor Advisory vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/153430
Scores
CVSS v3
4.3
EPSS
0.0098
EPSS Percentile
57.7%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Details
CWE
CWE-200
Status
published
Products (1)
ibm/security_identity_governance_and_intelligence
5.2 - 5.2.4.1
Published
Feb 21, 2019
Tracked Since
Feb 18, 2026