CVE-2018-1623 MEDIUM

CVE-2018-1623

Vendor Ibm
Product Security Privileged Identity Manager
Published April 2, 2019
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

4.0/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.0/AV:L/PR:N/S:U/AC:L/C:L/UI:N/I:N/A:N/E:U/RL:O/RC:C

What the vulnerability does

01Description

IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 144408.

Key dates

02Disclosure timeline

April 2, 2019 CVE published
September 17, 2024 Record updated