CVE-2018-1454

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 140089.

Metrics

CVSS 3.0 5.9/10CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-319

Affected software

Vendor	Product	Versions
IBM	InfoSphere Information Server	11.3; 11.5; 11.7

References

http://www.ibm.com/support/docview.wss?uid=swg22015222Vendor Advisory
http://www.securitytracker.com/id/1041038Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/140089Third Party Advisory, VDB Entry
http://www.ibm.com/support/docview.wss?uid=swg22015222Vendor Advisory
http://www.securitytracker.com/id/1041038Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/140089Third Party Advisory, VDB Entry

Timeline

Published: Jun 5, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-145415.4PHP Scripts Mall Basic B2B Script 2.0.0 has Reflected and Stored XSS via the First name, Last name, Address 1, City, State, and Company name CVE-2018-145435.5There exists one NULL pointer dereference vulnerability in AP4_JsonInspector::AddField in Ap4Atom.cpp in Bento4 1.5.1-624, which can allow a CVE-2018-145445.5There exists one invalid memory read bug in AP4_SampleDescription::GetFormat() in Ap4SampleDescription.h in Bento4 1.5.1-624, which can allo CVE-2018-145455.5There exists one invalid memory read bug in AP4_SampleDescription::GetType() in Ap4SampleDescription.h in Bento4 1.5.1-624, which can allow CVE-2018-145496.5An issue has been found in libwav through 2017-04-20. It is a SEGV in the function wav_write in libwav.c.CVE-2018-14558.8IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 is vulnerable to cross-site request forgery which could allow an attacker CVE-2018-145508.8An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function get_t CVE-2018-145519.8The ReadMATImageV4 function in coders/mat.c in ImageMagick 7.0.8-7 uses an uninitialized variable, leading to memory corruption.CVE-2018-145537.5gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specif CVE-2018-145577.5An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318 CVE-2018-145589.8An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318 CVE-2018-145597.5An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318