CVE-2018-1368

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

IBM Security Guardium Database Activity Monitor 9.0, 9.1, and 9.5 could allow a local user with low privileges to view report pages and perform some actions that only an admin should be performing, so there is risk that someone not authorized can change things that they are not suppose to. IBM X-Force ID: 137765.

Metrics

CVSS 3.0 4.4/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-269

Affected software

VendorProductVersions
IBMSecurity Guardium9.0; 9.1; 9.5

References

Timeline

Published
Feb 9, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-136807.5The mintToken function of a smart contract implementation for LexitToken, an Ethereum token, has an integer overflow that allows the owner oCVE-2018-136817.5The mintToken function of a smart contract implementation for SOSCoin, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-136827.5The mintToken function of a smart contract implementation for ViteMoneyCoin, an Ethereum token, has an integer overflow that allows the owneCVE-2018-136837.5The mintToken function of a smart contract implementation for exsulcoin, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-136847.5The mintToken function of a smart contract implementation for ZIP, an Ethereum token, has an integer overflow that allows the owner of the cCVE-2018-136857.5The mintToken function of a smart contract implementation for Vornox (VRX) (Contract Name: VornoxCoinToken), an Ethereum token, has an integCVE-2018-136867.5The mintToken function of a smart contract implementation for ICO Dollar (ICOD), an Ethereum token, has an integer overflow that allows the CVE-2018-136877.5The mintToken function of a smart contract implementation for normikaivo, an Ethereum token, has an integer overflow that allows the owner oCVE-2018-136887.5The mintToken function of a smart contract implementation for MallToken, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-136897.5The mintToken function of a smart contract implementation for CJXToken, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-13693.7IBM Security Guardium Big Data Intelligence (SonarG) 3.1 stores sensitive information in URL parameters. This may lead to information discloCVE-2018-136907.5The mintToken function of a smart contract implementation for Instacocoa, an Ethereum token, has an integer overflow that allows the owner o
CVE-2018-1368: Medium severity, CVSS 4.4 | Vulnix