Vulnerability in Ibm Infosphere_information_governance_catalog
CVE-2018-1899
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an attacker to change one of the settings related to InfoSphere Business Glossary Anywhere due to improper access control. IBM X-Force ID: 152528.
EPSS: 0.005 (41.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.
Affected products
- Ibm Infosphere_information_governance_catalog — versions 11.3, 11.5, 11.7
- Ibm Infosphere Information Server — versions 11.3, 11.7, 11.5
- Ibm Infosphere_information_server_on_cloud — versions 11.5, 11.7
References
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@us.ibm.com (VDB Entry, vdb-entry, Vendor Advisory, x_refsource_XF)
Frequently asked questions
- What is CVE-2018-1899?
- CVE-2018-1899 is a medium-severity vulnerability in Ibm Infosphere_information_governance_catalog. CVSS score: 4.3/10. Published 2019-03-05.
- How severe is CVE-2018-1899?
- Medium severity. CVSS v3 base score is 4.3 out of 10.