CVE-2018-1999

Опубликовано: 08 апр. 2019

Источник: nvd

CVSS3: 4.3

CVSS2: 4

EPSS Низкий

Описание

IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could reveal sensitive version information about the server from error pages that could aid an attacker in further attacks against the system. IBM X-Force ID: 154889.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/154889
VDB Entry
Vendor Advisory
https://www.ibm.com/support/docview.wss?uid=ibm10870502
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/154889
VDB Entry
Vendor Advisory
https://www.ibm.com/support/docview.wss?uid=ibm10870502
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:business_automation_workflow:18.0.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:business_automation_workflow:18.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:business_automation_workflow:18.0.0.2:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:ibm:business_process_manager:*:*:*:*:*:*:*:*

Версия от 8.0.0.0 (включая) до 8.0.1.3 (включая)

cpe:2.3:a:ibm:business_process_manager:*:*:*:*:*:*:*:*

Версия от 8.5.0.0 (включая) до 8.5.0.2 (включая)

cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.5.6.0:cf1:*:*:*:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.5.6.0:cf2:*:*:*:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf2017.06:*:*:*:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.6.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.6.0.0:cf2018.03:*:*:*:*:*:*

EPSS

Процентиль: 31%

0.00119

Низкий

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-9pp4-qqcw-c8m5