CVE-2018-1372

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

IBM Security Guardium Big Data Intelligence (SonarG) 3.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 137772.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-521

Affected software

No affected versions have been published.

Timeline

Published
Feb 27, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-137207.5The mintToken function of a smart contract implementation for Antoken, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-137217.5The mintToken function of a smart contract implementation for GoMineWorld, an Ethereum token, has an integer overflow that allows the owner CVE-2018-137227.5The mint function of a smart contract implementation for HYIPToken, an Ethereum token, has an integer overflow that allows the owner of the CVE-2018-137237.5The mintToken function of a smart contract implementation for SERVVIZIOToken, an Ethereum token, has an integer overflow that allows the ownCVE-2018-137247.5The mint function of a smart contract implementation for HYIPCrowdsale1, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-137257.5The mintToken function of a smart contract implementation for GlobalSuperGameToken, an Ethereum token, has an integer overflow that allows tCVE-2018-137267.5The mintToken function of a smart contract implementation for ISeeVoiceToken, an Ethereum token, has an integer overflow that allows the ownCVE-2018-137277.5The mintToken function of a smart contract implementation for Eastcoin, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-137287.5The mintToken function of a smart contract implementation for JixoCoin, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-137297.5The mintToken function of a smart contract implementation for JPMD100B, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-13739.8IBM Security Guardium Big Data Intelligence (SonarG) 3.1 uses an inadequate account lockout setting that could allow a remote attacker to brCVE-2018-137307.5The mintToken function of a smart contract implementation for HEY, an Ethereum token, has an integer overflow that allows the owner of the c
CVE-2018-1372: Critical severity, CVSS 9.8 | Vulnix