CVE-2018-1375

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

IBM Security Guardium Big Data Intelligence (SonarG) 3.1 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability. This could force a user to utilize a cookie that may be known to an attacker. IBM X-Force ID: 137776.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-384

Affected software

No affected versions have been published.

Timeline

Published
May 29, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-137507.5The mintToken function of a smart contract implementation for RichiumToken, an Ethereum token, has an integer overflow that allows the ownerCVE-2018-137517.5The mintToken function of a smart contract implementation for JustWallet, an Ethereum token, has an integer overflow that allows the owner oCVE-2018-137527.5The mintToken function of a smart contract implementation for Thread, an Ethereum token, has an integer overflow that allows the owner of thCVE-2018-137537.5The mintToken function of a smart contract implementation for DeWeiSecurityServiceToken, an Ethereum token, has an integer overflow that allCVE-2018-137547.5The mintToken function of a smart contract implementation for CryptosisToken, an Ethereum token, has an integer overflow that allows the ownCVE-2018-137557.5The mintToken function of a smart contract implementation for OTAKUToken, an Ethereum token, has an integer overflow that allows the owner oCVE-2018-137567.5The mintToken function of a smart contract implementation for CherryCoinFoundation, an Ethereum token, has an integer overflow that allows tCVE-2018-137577.5The mintToken function of a smart contract implementation for Coinquer, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-137587.5The mintToken function of a smart contract implementation for LoliCoin, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-137597.5The mintToken function of a smart contract implementation for BIGCAdvancedToken, an Ethereum token, has an integer overflow that allows the CVE-2018-13766.1IBM Security Guardium Big Data Intelligence (SonarG) 3.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbCVE-2018-137607.5The mintToken function of a smart contract implementation for MoneyChainNet (MCN), an Ethereum token, has an integer overflow that allows th
CVE-2018-1375: High severity, CVSS 7.5 | Vulnix