CVE-2018-1377

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

IBM Security Guardium Big Data Intelligence (SonarG) 3.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 137778.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-522

Affected software

No affected versions have been published.

Timeline

Published
Feb 26, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-137707.5The mintToken function of a smart contract implementation for UltimateCoin, an Ethereum token, has an integer overflow that allows the ownerCVE-2018-137717.5The mintToken function of a smart contract implementation for ExacoreContract, an Ethereum token, has an integer overflow that allows the owCVE-2018-137727.5The mintToken function of a smart contract implementation for TheFlashToken, an Ethereum token, has an integer overflow that allows the owneCVE-2018-137737.5The mintToken function of a smart contract implementation for Enterprise Token Ecosystem (ETE) (Contract Name: NetkillerToken), an Ethereum CVE-2018-137747.5The mintToken function of a smart contract implementation for Bitstarti, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-137757.5The mintToken function of a smart contract implementation for RCKT_Coin, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-137767.5The mintToken function of a smart contract implementation for AppleToken, an Ethereum token, has an integer overflow that allows the owner oCVE-2018-137777.5The mintToken function of a smart contract implementation for RRToken, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-137787.5The mintToken function of a smart contract implementation for CGCToken, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-137797.5The mintToken function of a smart contract implementation for YLCToken, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-137807.5The mintToken function of a smart contract implementation for ESH, an Ethereum token, has an integer overflow that allows the owner of the cCVE-2018-137817.5The mintToken function of a smart contract implementation for MyYLC, an Ethereum token, has an integer overflow that allows the owner of the
CVE-2018-1377: High severity, CVSS 7.8 | Vulnix