CVE-2018-1453

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

IBM Security Identity Manager Virtual Appliance 7.0 allows an authenticated attacker to upload or transfer files of dangerous types that can be automatically processed within the environment. IBM X-Force ID: 140055.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

Vendor	Product	Versions
IBM	Security Identity Manager	7.0

References

http://www.ibm.com/support/docview.wss?uid=swg22013617Patch, Vendor Advisory
http://www.securitytracker.com/id/1041383Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/140055VDB Entry, Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22013617Patch, Vendor Advisory
http://www.securitytracker.com/id/1041383Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/140055VDB Entry, Vendor Advisory

Timeline

Published: Jun 8, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-145319.8An issue was discovered in Bento4 1.5.1-624. There is an unspecified "heap-buffer-overflow" crash in the AP4_HvccAtom class in Core/Ap4HvccA CVE-2018-145329.8An issue was discovered in Bento4 1.5.1-624. There is a heap-based buffer over-read in AP4_Mpeg2TsVideoSampleStream::WriteSample in Core/Ap4 CVE-2018-145337.8read_tmp and write_tmp in Inteno IOPSYS allow attackers to gain privileges after writing to /tmp/etc/smb.conf because /var is a symlink to /CVE-2018-14545.9IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to obtain sensitive information, caused by the failure CVE-2018-145415.4PHP Scripts Mall Basic B2B Script 2.0.0 has Reflected and Stored XSS via the First name, Last name, Address 1, City, State, and Company name CVE-2018-145435.5There exists one NULL pointer dereference vulnerability in AP4_JsonInspector::AddField in Ap4Atom.cpp in Bento4 1.5.1-624, which can allow a CVE-2018-145445.5There exists one invalid memory read bug in AP4_SampleDescription::GetFormat() in Ap4SampleDescription.h in Bento4 1.5.1-624, which can allo CVE-2018-145455.5There exists one invalid memory read bug in AP4_SampleDescription::GetType() in Ap4SampleDescription.h in Bento4 1.5.1-624, which can allow CVE-2018-145496.5An issue has been found in libwav through 2017-04-20. It is a SEGV in the function wav_write in libwav.c.CVE-2018-14558.8IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 is vulnerable to cross-site request forgery which could allow an attacker CVE-2018-145508.8An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function get_t CVE-2018-145519.8The ReadMATImageV4 function in coders/mat.c in ImageMagick 7.0.8-7 uses an uninitialized variable, leading to memory corruption.