CVE-2018-1369

LowCVSS 3.7/10Last modified Jun 17, 2026

Description

IBM Security Guardium Big Data Intelligence (SonarG) 3.1 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 137767.

Metrics

CVSS 3.0 3.7/10CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published
May 29, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-136907.5The mintToken function of a smart contract implementation for Instacocoa, an Ethereum token, has an integer overflow that allows the owner oCVE-2018-136917.5The mintToken function of a smart contract implementation for R Time Token v3 (RS) (Contract Name: RTokenMain), an Ethereum token, has an inCVE-2018-136927.5The mintToken function of a smart contract implementation for MehdiTAZIToken, an Ethereum token, has an integer overflow that allows the ownCVE-2018-136937.5The mintToken function of a smart contract implementation for GreenEnergyToken, an Ethereum token, has an integer overflow that allows the oCVE-2018-136947.5The mintToken function of a smart contract implementation for GMile, an Ethereum token, has an integer overflow that allows the owner of theCVE-2018-136957.5The mint function of a smart contract implementation for CTest7, an Ethereum token, has an integer overflow that allows the owner of the conCVE-2018-136967.5The mintToken function of a smart contract implementation for RedTicket, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-136977.5The mintToken function of a smart contract implementation for RobotBTC, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-136987.5The mintTokens function of a smart contract implementation for Play2LivePromo, an Ethereum token, has an integer overflow that allows the owCVE-2018-136997.5The mintToken function of a smart contract implementation for DestiNeed (DSN), an Ethereum token, has an integer overflow that allows the owCVE-2018-13705.4IBM Security Guardium Big Data Intelligence (SonarG) 3.1 specifies permissions for a security-critical resource in a way that allows that reCVE-2018-137007.5The mintToken function of a smart contract implementation for IPMCoin, an Ethereum token, has an integer overflow that allows the owner of t
CVE-2018-1369: Low severity, CVSS 3.7 | Vulnix