Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.or
https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E - https://support.f5.com/csp/article/K73008537?utm_source=f5support&amp%3Butm_medium=RSS - https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev
.apache.org%3E - https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E - https://www.oracle.com/security-alerts/cpuapr2020.html
CVE ID: CVE-2018-1337 State: PUBLISHED Published: 2018-07-10T13:00:00Z Last Updated: 2024-09-17T01:12:12.053Z Vendors: Apache Software Foundation Products: Apache Directory Problem Types: Plaintext Password Disclosure in Secured Channel Description: In Apache Directory LDAP API before 1.0.2, a bug in the way the SSL Filter was setup made it possible for another thread to use the connection before the TLS layer has been established, if the connection has already been used and put back in a pool of connections, leading to leaking any information contained in this request (including the credentials when sending a BIND request). Additional Analyst Notes: - CVE Program Container: References: - ht
luding the credentials when sending a BIND request). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104744 - https://lists.apache.org/thread.html/d66081195e9a02ee7cc20fb243b60467d1419586eed28297d820768f%40%3Cdev.directory.apache.org%3E - https://lists.apache.org/thread.html/r1a258430d820a90ff9d4558319296cc517ff2252327d7b3546d16749%40%3Cjira.kafka.apache.org%3E - https://lists.apache.org/thread.html/r56b304fb9960c869995efbb31da3b9b7c6d53ee31f7f7048eb80434b%40%3Cdev.kafka.apache.org%3E - https://lists.apache.org/thread.html/r55e74532e7f9e84ecfa56b4e0a50a5fe0ba6f7a76880520e4400b0d7%40%3Cjira.kafka.apache.org%3E - https://lists.apache.org/thread
55e74532e7f9e84ecfa56b4e0a50a5fe0ba6f7a76880520e4400b0d7%40%3Cjira.kafka.apache.org%3E - https://lists.apache.org/thread.html/r4da40aa50cfdb2158898f2bc6df81feec1d42c6a06db6537d5cc0496%40%3Cjira.kafka.apache.org%3E - https://lists.apache.org/thread.html/r0e645b3f6ca977dc60b7cec231215c59a9471736c2402c1fef5a0616%40%3Cjira.kafka.apache.org%3E - https://lists.apache.org/thread.html/r1815fb5b0c345f571c740e7a1b48d7477647edd4ffcf9d5321e69446%40%3Cdev.kafka.apache.org%3E
CVE ID: CVE-2018-1338 State: PUBLISHED Published: 2018-04-25T21:00:00Z Last Updated: 2024-09-17T00:07:04.416Z Vendors: Apache Software Foundation Products: Apache Tika Problem Types: DoS Vulnerability-- infinite loop Description: A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache Tika before 1.18. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:2669 - https://lists.apache.org/thread.html/4d20c5748fb9f836653bc78a1bad991ba8485d82a1e821f70b641932%40%3Cdev.tika.apache.org%3E
CVE ID: CVE-2018-1339 State: PUBLISHED Published: 2018-04-25T21:00:00Z Last Updated: 2024-09-16T17:14:39.308Z Vendors: Apache Software Foundation Products: Apache Tika Problem Types: Denial Of Service Vulnerability -- infinite loop Description: A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's ChmParser in versions of Apache Tika before 1.18. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:2669 - https://lists.apache.org/thread.html/4d2cb5c819401bb075e2a1130e0d14f0404a136541a6f91da0225828%40%3Cdev.tika.apache.org%3E
CVE ID: CVE-2018-1340 State: PUBLISHED Published: 2019-02-07T22:00:00Z Last Updated: 2024-09-16T19:20:49.021Z Vendors: Apache Software Foundation Products: Apache Guacamole Problem Types: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute Description: Prior to 1.0.0, Apache Guacamole used a cookie for client-side storage of the user's session token. This cookie lacked the "secure" flag, which could allow an attacker eavesdropping on the network to intercept the user's session token if unencrypted HTTP requests are made to the same domain. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/af1632e13dd9acf7537546660cae9143cbb10fdd2f9
- CVE Program Container: References: - https://lists.apache.org/thread.html/af1632e13dd9acf7537546660cae9143cbb10fdd2f9bb0832a690979%40%3Cannounce.guacamole.apache.org%3E - http://www.securityfocus.com/bid/106768
CVE ID: CVE-2018-1342 State: PUBLISHED Published: 2018-01-26T02:00:00Z Last Updated: 2024-09-16T16:43:19.334Z Vendors: Micro Focus Products: NetIQ Access Manager, Administrative Console Problem Types: Arbitrary file upload to the Admin Console server Description: A Vulnerability exists on Admin Console where an attacker can upload files to the Admin Console server, and potentially execute them. This impacts NetIQ Access Manager versions 4.3 and 4.4 as well as the Administrative console. Additional Analyst Notes: - CVE Program Container: References: - https://www.novell.com/support/kb/doc.php?id=7022444
CVE ID: CVE-2018-1343 State: PUBLISHED Published: 2018-03-06T20:00:00Z Last Updated: 2024-09-17T03:59:43.897Z Vendors: Micro Focus Products: NetIQ Privileged Account Manager (PAM) 3.1 and 3.2 Problem Types: Improper Access - exposure enabling unauthenticated access to remote host. Description: PAM exposure enabling unauthenticated access to remote host Additional Analyst Notes: - CVE Program Container: References: - https://www.novell.com/support/kb/doc.php?id=7022630 - https://www.netiq.com/documentation/privileged-account-manager-3/npam3203-release-notes/data/npam3203-release-notes.html - https://www.netiq.com/documentation/privileged-account-manager-3/npam3104-release-notes/data/npam3104-
ease-notes.html - https://www.netiq.com/documentation/privileged-account-manager-3/npam3104-release-notes/data/npam3104-release-notes.html
CVE ID: CVE-2018-1344 State: PUBLISHED Published: 2018-03-21T14:00:00 Last Updated: 2024-08-05T03:59:38.599Z Severity: LOW (CVSS 3.1 CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: NetIQ Products: iManager Problem Types: communication downgrade Description: Addresses potential communication downgrade attack in NetIQ iManager versions prior to 3.1 Additional Analyst Notes: - CVE Program Container: References: - https://www.netiq.com/documentation/imanager-31/imanager31_releasenotes/data/imanager31_releasenotes.html
CVE ID: CVE-2018-1345 State: PUBLISHED Published: 2018-03-21T14:00:00 Last Updated: 2024-08-05T03:59:38.253Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: NetIQ Products: iManager Problem Types: Elevation of Privilege Description: NetIQ iManager, versions prior to 3.1, under some circumstances could be susceptible to an elevation of privilege attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.netiq.com/documentation/imanager-31/imanager31_releasenotes/data/imanager31_releasenotes.html
CVE ID: CVE-2018-1346 State: PUBLISHED Published: 2018-03-21T14:00:00 Last Updated: 2024-08-05T03:59:38.700Z Severity: LOW (CVSS 3.1 CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: NetIQ Products: eDirectory Problem Types: Denial of Service Description: Addresses denial of service attack to eDirectory versions prior to 9.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.netiq.com/documentation/edirectory-91/edirectory91_releasenotes/data/edirectory91_releasenotes.html - http://www.securityfocus.com/bid/103493
CVE ID: CVE-2018-1347 State: PUBLISHED Published: 2018-03-21T14:00:00 Last Updated: 2024-08-05T03:59:38.588Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: NetIQ Products: iManager Problem Types: Reflected XSS Description: The administrative web interface in NetIQ iManager, versions prior to 3.1, are vulnerable to reflected cross site scripting. Additional Analyst Notes: - CVE Program Container: References: - https://www.netiq.com/documentation/imanager-31/imanager31_releasenotes/data/imanager31_releasenotes.html - http://www.securityfocus.com/bid/103492
CVE ID: CVE-2018-1348 State: PUBLISHED Published: 2018-03-26T19:00:00 Last Updated: 2024-08-05T03:59:38.587Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: NetIQ Products: Identity Manager Problem Types: NetIQ Identity Manager driver, in versions prior to 4.7, allows for an SSL handshake renegotiation which could result in a MITM attack. Description: NetIQ Identity Manager driver, in versions prior to 4.7, allows for an SSL handshake renegotiation which could result in a MITM attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.netiq.com/documentation/identity-manager-47/releasenotes_idm47/data/releasenotes_idm47.html - http:
ences: - https://www.netiq.com/documentation/identity-manager-47/releasenotes_idm47/data/releasenotes_idm47.html - http://www.securityfocus.com/bid/103530
CVE ID: CVE-2018-1349 State: PUBLISHED Published: 2018-03-26T19:00:00 Last Updated: 2024-08-05T03:59:38.707Z Severity: LOW (CVSS 2.3 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: NetIQ Products: Identity Manager Problem Types: The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system or configuration enumeration. Description: The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system or configuration enumeration. Additional Analyst Notes: - CVE Program Container: References: - https://www.netiq.com/documentation/identity-manager-47/releasenotes_idm47/data/releasenotes_idm47.htm
er: References: - https://www.netiq.com/documentation/identity-manager-47/releasenotes_idm47/data/releasenotes_idm47.html - http://www.securityfocus.com/bid/103531
CVE ID: CVE-2018-1350 State: PUBLISHED Published: 2018-03-26T19:00:00 Last Updated: 2024-08-05T03:59:38.783Z Severity: LOW (CVSS 2.3 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: NetIQ Products: Identity Manager Problem Types: The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system enumeration. Description: The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system enumeration. Additional Analyst Notes: - CVE Program Container: References: - https://www.netiq.com/documentation/identity-manager-47/releasenotes_idm47/data/releasenotes_idm47.html - http://www.securityfocus.com/b
q.com/documentation/identity-manager-47/releasenotes_idm47/data/releasenotes_idm47.html - http://www.securityfocus.com/bid/103532
CVE ID: CVE-2018-1351 State: PUBLISHED Published: 2018-06-28T15:00:00Z Last Updated: 2024-10-25T14:09:00.507Z Vendors: Fortinet, Inc. Products: Fortinet FortiManager Problem Types: Execute unauthorized code or commands Description: A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.6 and below versions allows attacker to execute HTML/javascript code via managed remote devices CLI commands by viewing the remote device CLI config installation log. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1041181 - https://fortiguard.com/advisory/FG-IR-18-006 - http://www.securityfocus.com/bid/104533
CVE ID: CVE-2018-1352 State: PUBLISHED Published: 2019-02-08T18:00:00 Last Updated: 2024-10-25T14:31:12.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: A format string vulnerability in Fortinet FortiOS 5.6.0 allows attacker to execute unauthorized code or commands via the SSH username variable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-18-018
CVE ID: CVE-2018-1353 State: PUBLISHED Published: 2018-09-05T13:00:00Z Last Updated: 2024-10-25T14:08:31.739Z Vendors: Fortinet, Inc. Products: FortiManager Problem Types: Improper Access Control Description: An information disclosure vulnerability in Fortinet FortiManager 6.0.1 and below versions allows a standard user with adom assignment read the interface settings of vdoms unrelated to the assigned adom. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-18-016
CVE ID: CVE-2018-1354 State: PUBLISHED Published: 2018-06-27T20:00:00 Last Updated: 2024-10-25T14:09:22.438Z Vendors: Fortinet, Inc. Products: Fortinet FortiManager, FortiAnalyzer Problem Types: Improper Access Control Description: An improper access control vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allows a regular user edit the avatar picture of other users with arbitrary content. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1041183 - https://fortiguard.com/advisory/FG-IR-18-014 - http://www.securitytracker.com/id/1041182 - http://www.se
om/id/1041183 - https://fortiguard.com/advisory/FG-IR-18-014 - http://www.securitytracker.com/id/1041182 - http://www.securityfocus.com/bid/104537
CVE ID: CVE-2018-1355 State: PUBLISHED Published: 2018-06-27T20:00:00Z Last Updated: 2024-10-25T14:09:11.290Z Vendors: Fortinet, Inc. Products: Fortinet FortiManager, FortiAnalyzer Problem Types: Execute unauthorized code or commands Description: An open redirect vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allows attacker to inject script code during converting a HTML table to a PDF document under the FortiView feature. An attacker may be able to social engineer an authenticated user into generating a PDF file containing injected malicious URLs. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment
PDF file containing injected malicious URLs. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/104546 - http://www.securitytracker.com/id/1041185 - https://fortiguard.com/advisory/FG-IR-18-022 - http://www.securitytracker.com/id/1041184
CVE ID: CVE-2018-1356 State: PUBLISHED Published: 2019-04-09T20:55:00 Last Updated: 2024-10-25T14:07:25.629Z Vendors: Fortinet Products: FortiSandbox Problem Types: Execute unauthorized code or commands Description: A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiSandbox before 3.0 may allow an attacker to execute unauthorized code or commands via the back_url parameter in the file scan component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-18-024 - http://www.securityfocus.com/bid/107838
CVE ID: CVE-2018-1358 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:38:23.823Z Description: No description available.
CVE ID: CVE-2018-1359 State: REJECTED Published: N/A Last Updated: 2025-05-06T12:38:03.786Z Description: No description available.
CVE ID: CVE-2018-1360 State: PUBLISHED Published: 2019-04-25T17:08:07 Last Updated: 2024-10-25T14:30:18.549Z Vendors: Fortinet, Inc. Products: Fortinet FortiManager Problem Types: Information disclosure Description: A cleartext transmission of sensitive information vulnerability in Fortinet FortiManager 5.2.0 through 5.2.7, 5.4.0 and 5.4.1 may allow an unauthenticated attacker in a man in the middle position to retrieve the admin password via intercepting REST API JSON responses. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-18-051 - http://www.securityfocus.com/bid/108079
CVE ID: CVE-2018-1361 State: PUBLISHED Published: 2018-01-11T17:00:00Z Last Updated: 2024-09-16T19:30:09.270Z Vendors: IBM Products: WebSphere Portal Problem Types: Cross-Site Scripting Description: IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 137158. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=swg22012409 - https://exchange.xforce.ibmcloud.com/vulnerabilities/137158 - http://www.securitytracker
t/docview.wss?uid=swg22012409 - https://exchange.xforce.ibmcloud.com/vulnerabilities/137158 - http://www.securitytracker.com/id/1040132 - http://www.securityfocus.com/bid/102501
CVE ID: CVE-2018-1362 State: PUBLISHED Published: 2018-01-19T14:00:00Z Last Updated: 2024-09-16T19:30:47.699Z Vendors: IBM Products: Cram Social Program Management Problem Types: Gain Privileges Description: IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 within Citizen Portal could allow an authenticated user to withdraw other user's submitted applications from the system and possibly obtain privileges. IBM X-Force ID: 137380. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22012528 - https://exchange.xforce.ibmcloud.com/vulnerabilities/137380
CVE ID: CVE-2018-1363 State: PUBLISHED Published: 2018-04-25T13:00:00Z Last Updated: 2024-09-17T01:05:55.090Z Vendors: IBM Products: Jazz Reporting Service Problem Types: Cross-Site Scripting Description: IBM Jazz Reporting Service (JRS) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 137448. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/137448 - http://www.ibm.com/support/docview.wss
iner: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/137448 - http://www.ibm.com/support/docview.wss?uid=swg22015712 - http://www.securityfocus.com/bid/104014
CVE ID: CVE-2018-1364 State: PUBLISHED Published: 2018-01-29T16:00:00Z Last Updated: 2024-09-16T23:21:50.442Z Vendors: IBM Products: Content Navigator Problem Types: Obtain Information Description: IBM Content Navigator 2.0 and 3.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 137449. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22012595 - http://www.securityfocus.com/bid/102864 - https://exchange.xforce.ibmcloud.com/vulnerabilities/137449
CVE ID: CVE-2018-1366 State: PUBLISHED Published: 2018-02-07T17:00:00Z Last Updated: 2024-09-16T16:12:30.773Z Vendors: IBM Products: Content Navigator Problem Types: Gain Access Description: IBM Content Navigator 2.0 and 3.0 is vulnerable to Comma Separated Value (CSV) Injection. An attacker could exploit this vulnerability to exploit other vulnerabilities in spreadsheet software. IBM X-Force ID: 137452. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/137452 - http://www.ibm.com/support/docview.wss?uid=swg22012674
CVE ID: CVE-2018-1368 State: PUBLISHED Published: 2018-02-09T17:00:00Z Last Updated: 2024-09-17T04:00:02.889Z Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium Database Activity Monitor 9.0, 9.1, and 9.5 could allow a local user with low privileges to view report pages and perform some actions that only an admin should be performing, so there is risk that someone not authorized can change things that they are not suppose to. IBM X-Force ID: 137765. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/137765 - http://www.ibm.com/support/docview.wss?uid=swg22013302 - htt
tps://exchange.xforce.ibmcloud.com/vulnerabilities/137765 - http://www.ibm.com/support/docview.wss?uid=swg22013302 - http://www.securitytracker.com/id/1040349
CVE ID: CVE-2018-1369 State: PUBLISHED Published: 2018-05-29T13:00:00Z Last Updated: 2024-09-16T23:55:43.344Z Severity: LOW (CVSS 3.7 CVSS:3.0/A:N/AC:H/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Guardium Big Data Intelligence Problem Types: Obtain Information Description: IBM Security Guardium Big Data Intelligence (SonarG) 3.1 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 137767. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22016131 - http
onal Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22016131 - https://exchange.xforce.ibmcloud.com/vulnerabilities/137767
CVE ID: CVE-2018-1370 State: PUBLISHED Published: 2018-05-29T13:00:00Z Last Updated: 2024-09-16T18:29:06.630Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/A:N/AC:H/AV:N/C:L/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Guardium Big Data Intelligence Problem Types: Gain Access Description: IBM Security Guardium Big Data Intelligence (SonarG) 3.1 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 137769. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/137769 - http://www.ibm.com/support/docview.wss?uid=swg22016132
CVE ID: CVE-2018-1371 State: PUBLISHED Published: 2018-04-17T15:00:00Z Last Updated: 2024-09-16T16:42:58.084Z Vendors: IBM Products: MQ Problem Types: Denial of Service Description: An IBM WebSphere MQ 8.0.0.8, 9.0.0.2, and 9.0.4 Client connecting to a MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process terminating it. IBM X-Force ID: 137771. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/137771 - http://www.ibm.com/support/docview.wss?uid=swg22012983
CVE ID: CVE-2018-1372 State: PUBLISHED Published: 2018-02-27T17:00:00Z Last Updated: 2024-09-17T02:21:56.132Z Vendors: IBM Products: Security Guardium Big Data Intelligence Problem Types: Obtain Information Description: IBM Security Guardium Big Data Intelligence (SonarG) 3.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 137772. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/137772 - http://www.securityfocus.com/bid/103237 - http://www.ibm.com/support/docview.wss?uid=swg22013832