Description

IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 152021.

Remediation

References

CVE-2018-1886

Related Vulnerabilities

Frontaccounting Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-4045)

LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-18358)

WordPress Plugin YARPP-Yet Another Related Posts SQL Injection (5.30.2)

Atlassian Jira Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-20897)

MySQL Use After Free Vulnerability (CVE-2017-3302)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-200 CVE-2018-1886