CVE-2018-1938

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

IBM Cloud Private 3.1.1 could alllow a local user with administrator privileges to intercept highly sensitive unencrypted data. IBM X-Force ID: 153318.

Metrics

CVSS 3.0 4.4/10CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-311

Affected software

Vendor	Product	Versions
IBM	Cloud Private	3.1.1

References

http://www.securityfocus.com/bid/107299Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/153318VDB Entry, Vendor Advisory
https://www.ibm.com/support/docview.wss?uid=ibm10871770Vendor Advisory
http://www.securityfocus.com/bid/107299Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/153318VDB Entry, Vendor Advisory
https://www.ibm.com/support/docview.wss?uid=ibm10871770Vendor Advisory

Timeline

Published: Mar 5, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-193866.1SolarWinds Database Performance Analyzer 11.1.457 contains an instance of Reflected XSS in its idcStateError component, where the page param CVE-2018-193885.5FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read, access violation, and CVE-2018-193895.5FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (Break instruction exception and applicatio CVE-2018-19396.1IBM Cloud Private 3.1.1 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to CVE-2018-193905.5FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (Break instruction exception and applicatio CVE-2018-193916.1Cobham Satcom Sailor 250 and 500 devices before 1.25 contained persistent XSS, which could be exploited by an unauthenticated threat actor v CVE-2018-193929.8Cobham Satcom Sailor 250 and 500 devices before 1.25 contained an unauthenticated password reset vulnerability. This could allow modificatio CVE-2018-193937.5Cobham Satcom Sailor 800 and 900 devices contained a vulnerability that allowed for arbitrary writing of content to the system's configurati CVE-2018-193944.8Cobham Satcom Sailor 800 and 900 devices contained persistent XSS, which required administrative access to exploit. The vulnerability was ex CVE-2018-193957.5ext/standard/var.c in PHP 5.x through 7.1.24 on Windows allows attackers to cause a denial of service (NULL pointer dereference and applicat CVE-2018-193967.5ext/standard/var_unserializer.c in PHP 5.x through 7.1.24 allows attackers to cause a denial of service (application crash) via an unseriali CVE-2018-194047.2In YXcms 1.4.7, protected/apps/appmanage/controller/indexController.php allow remote authenticated Administrators to execute any PHP code by