Description

IBM Jazz Foundation products could disclose sensitive information to an authenticated attacker that could be used in further attacks against the system. IBM X-Force ID: 139026.

Remediation

References

CVE-2018-1423

Related Vulnerabilities

Magento Improper Authorization Vulnerability (CVE-2021-28563)

Craft CMS CVE-2017-8383 Vulnerability (CVE-2017-8383)

WordPress Plugin ThirstyAffiliates Affiliate Link Manager Cross-Site Scripting (3.9.2)

WordPress Plugin Admin renamer extended Cross-Site Scripting (3.2)

WordPress Plugin Picturesurf Gallery 'upload.php' Arbitrary File Upload (1.2)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-200 CVE-2018-1423