CVE-2018-1370

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

IBM Security Guardium Big Data Intelligence (SonarG) 3.1 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 137769.

Metrics

CVSS 3.0 5.4/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-732

Affected software

No affected versions have been published.

Timeline

Published
May 29, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-137007.5The mintToken function of a smart contract implementation for IPMCoin, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-137017.5The mintToken function of a smart contract implementation for KissMe, an Ethereum token, has an integer overflow that allows the owner of thCVE-2018-137027.5The mintToken function of a smart contract implementation for Essence, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-137037.5The mintToken function of a smart contract implementation for CERB_Coin, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-137047.5The mintToken function of a smart contract implementation for eddToken, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-137057.5The mintToken function of a smart contract implementation for PMHToken, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-137067.5The mintToken function of a smart contract implementation for IdeaCoin, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-137077.5The mintToken function of a smart contract implementation for YSS, an Ethereum token, has an integer overflow that allows the owner of the cCVE-2018-137087.5The mintToken function of a smart contract implementation for Order (ETH) (Contract Name: BuyToken), an Ethereum token, has an integer overfCVE-2018-137097.5The mintToken function of a smart contract implementation for Tube, an Ethereum token, has an integer overflow that allows the owner of the CVE-2018-13716.5An IBM WebSphere MQ 8.0.0.8, 9.0.0.2, and 9.0.4 Client connecting to a MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process CVE-2018-137107.5The mintToken function of a smart contract implementation for Mjolnir, an Ethereum token, has an integer overflow that allows the owner of t
CVE-2018-1370: Medium severity, CVSS 5.4 | Vulnix