CVE-2018-1410

Опубликовано: 19 фев. 2018

Источник: nvd

CVSS3: 7.8

CVSS2: 4.6

EPSS Низкий

Описание

IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on the system. By crafting a command line sent via the shared memory IPC, which could be tricked into executing an executable chosen by the attacker. IBM X-Force ID: 138709.

Ссылки

http://www.ibm.com/support/docview.wss?uid=swg22010766
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22010767
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/138709
VDB Entry
http://www.ibm.com/support/docview.wss?uid=swg22010766
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22010767
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/138709
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:notes:8.5.1.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:notes:8.5.2.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:notes:8.5.3.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:notes:9.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:notes:9.0.1.9:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:ibm:client_application_access:1.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:client_application_access:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:client_application_access:1.0.1.2:*:*:*:*:*:*:*

EPSS

Процентиль: 12%

0.00042

Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-2343-rx97-48x3