CVE-2018-1757

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

IBM Security Identity Governance and Intelligence 5.2.3.2 and 5.2.4 could allow an attacker to obtain sensitive information due to missing authentication in IGI for the survey application. IBM X-Force ID: 148601.

Metrics

CVSS 3.0 5.3/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-306

Affected software

Vendor	Product	Versions
IBM	Security Identity Governance and Intelligence	5.2.3.2; 5.2.4

References

http://www.ibm.com/support/docview.wss?uid=ibm10728883Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/148601Patch, VDB Entry, Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=ibm10728883Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/148601Patch, VDB Entry, Vendor Advisory

Timeline

Published: Sep 7, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-175709.8utils/ut_ws_svr.c in ViaBTC Exchange Server before 2018-08-21 has an integer overflow leading to memory corruption.CVE-2018-175716.1Vanilla before 2.6.1 allows XSS via the email field of a profile.CVE-2018-175724.8InfluxDB 0.9.5 has Reflected XSS in the Write Data module.CVE-2018-175739.8The Wp-Insert plugin through 2.4.2 for WordPress allows upload of arbitrary PHP code because of the exposure and configuration of FCKeditor CVE-2018-175745.4An issue was discovered in YMFE YApi 1.3.23. There is stored XSS in the name field of a project.CVE-2018-175759.8SWA SWA.JACAD 3.1.37 Build 024 has SQL Injection via the /academico/aluno/esqueci-minha-senha/ studentId parameter.CVE-2018-17585.4IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users t CVE-2018-175807.1A heap-based buffer over-read exists in the function fast_edit_packet() in the file send_packets.c of Tcpreplay v4.3.0 beta1. This can lead CVE-2018-175816.5CiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to Den CVE-2018-175827.1Tcpreplay v4.3.0 beta1 contains a heap-based buffer over-read. The get_next_packet() function in the send_packets.c file uses the memcpy() f CVE-2018-175836.1The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules[0][content] parameter in a wpfc_save_exclude_pages action.CVE-2018-175848.8The WP Fastest Cache plugin 0.8.8.5 for WordPress has CSRF via the wp-admin/admin.php wpfastestcacheoptions page.