admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-06-08 14:08:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

- Synchronized data.

Browse Source
This commit is contained in:
CVE Team 2018-10-11 08:09:09 -04:00
parent d14706b8f4
commit 59bfda5c91
No known key found for this signature in database
GPG Key ID: 0DA1F9F56BC892E8
5 changed files with 251 additions and 261 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

106
2018/1xxx/CVE-2018-1706.json
View File

@ -1,90 +1,88 @@
{ {
"data_type" : "CVE",
"impact" : {
"cvssv3" : {
"TM" : {
"RL" : "O",
"RC" : "C",
"E" : "H"
},
"BM" : {
"AV" : "N",
"SCORE" : "5.400",
"A" : "N",
"PR" : "L",
"AC" : "L",
"I" : "L",
"UI" : "R",
"C" : "L",
"S" : "C"
}
}
},
"references" : {
"reference_data" : [
{
"name" : "http://www.ibm.com/support/docview.wss?uid=ibm10719669",
"refsource" : "CONFIRM",
"url" : "http://www.ibm.com/support/docview.wss?uid=ibm10719669",
"title" : "IBM Security Bulletin 719669 (Spectrum Symphony)"
},
{
"title" : "X-Force Vulnerability Report",
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/146341",
"name" : "ibm-symphony-cve20181706-xss (146341)",
"refsource" : "XF"
}
]
},
"data_format" : "MITRE",
"CVE_data_meta" : { "CVE_data_meta" : {
"ID" : "CVE-2018-1706",
"ASSIGNER" : "psirt@us.ibm.com", "ASSIGNER" : "psirt@us.ibm.com",
"DATE_PUBLIC" : "2018-08-01T00:00:00", "DATE_PUBLIC" : "2018-08-01T00:00:00",
"ID" : "CVE-2018-1706",
"STATE" : "PUBLIC" "STATE" : "PUBLIC"
}, },
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "IBM Spectrum Symphony 7.2.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 146341."
}
]
},
"affects" : { "affects" : {
"vendor" : { "vendor" : {
"vendor_data" : [ "vendor_data" : [
{ {
"vendor_name" : "IBM",
"product" : { "product" : {
"product_data" : [ "product_data" : [
{ {
"product_name" : "Spectrum Symphony",
"version" : { "version" : {
"version_data" : [ "version_data" : [
{ {
"version_value" : "7.2.0.2" "version_value" : "7.2.0.2"
} }
] ]
}, }
"product_name" : "Spectrum Symphony"
} }
] ]
} },
"vendor_name" : "IBM"
} }
] ]
} }
}, },
"data_format" : "MITRE",
"data_type" : "CVE",
"data_version" : "4.0",
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "IBM Spectrum Symphony 7.2.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 146341."
}
]
},
"impact" : {
"cvssv3" : {
"BM" : {
"A" : "N",
"AC" : "L",
"AV" : "N",
"C" : "L",
"I" : "L",
"PR" : "L",
"S" : "C",
"SCORE" : "5.400",
"UI" : "R"
},
"TM" : {
"E" : "H",
"RC" : "C",
"RL" : "O"
}
}
},
"problemtype" : { "problemtype" : {
"problemtype_data" : [ "problemtype_data" : [
{ {
"description" : [ "description" : [
{ {
"value" : "Cross-Site Scripting", "lang" : "eng",
"lang" : "eng" "value" : "Cross-Site Scripting"
} }
] ]
} }
] ]
}, },
"data_version" : "4.0" "references" : {
"reference_data" : [
{
"name" : "http://www.ibm.com/support/docview.wss?uid=ibm10719669",
"refsource" : "CONFIRM",
"url" : "http://www.ibm.com/support/docview.wss?uid=ibm10719669"
},
{
"name" : "ibm-symphony-cve20181706-xss(146341)",
"refsource" : "XF",
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/146341"
}
]
}
} }

124
2018/1xxx/CVE-2018-1708.json
View File

@ -1,12 +1,67 @@
{ {
"CVE_data_meta" : {
"ASSIGNER" : "psirt@us.ibm.com",
"DATE_PUBLIC" : "2018-08-01T00:00:00",
"ID" : "CVE-2018-1708",
"STATE" : "PUBLIC"
},
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "Spectrum Symphony",
"version" : {
"version_data" : [
{
"version_value" : "7.2.0.2"
},
{
"version_value" : "7.1.2"
}
]
}
}
]
},
"vendor_name" : "IBM"
}
]
}
},
"data_format" : "MITRE",
"data_type" : "CVE",
"data_version" : "4.0",
"description" : { "description" : {
"description_data" : [ "description_data" : [
{ {
"lang" : "eng", "lang" : "eng",
"value" : "IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to obtain sensitive user information such as passwords through the WebUI. IBM X-Force ID: 146343." "value" : "IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to obtain sensitive user information such as passwords through the WebUI. IBM X-Force ID: 146343."
} }
] ]
}, },
"impact" : {
"cvssv3" : {
"BM" : {
"A" : "N",
"AC" : "L",
"AV" : "N",
"C" : "H",
"I" : "N",
"PR" : "L",
"S" : "U",
"SCORE" : "6.500",
"UI" : "N"
},
"TM" : {
"E" : "U",
"RC" : "C",
"RL" : "O"
}
}
},
"problemtype" : { "problemtype" : {
"problemtype_data" : [ "problemtype_data" : [
{ {
@ -19,75 +74,18 @@
} }
] ]
}, },
"data_version" : "4.0",
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"version" : {
"version_data" : [
{
"version_value" : "7.2.0.2"
},
{
"version_value" : "7.1.2"
}
]
},
"product_name" : "Spectrum Symphony"
}
]
},
"vendor_name" : "IBM"
}
]
}
},
"data_type" : "CVE",
"data_format" : "MITRE",
"references" : { "references" : {
"reference_data" : [ "reference_data" : [
{ {
"url" : "https://www.ibm.com/support/docview.wss?uid=ibm10719667",
"refsource" : "CONFIRM",
"name" : "https://www.ibm.com/support/docview.wss?uid=ibm10719667", "name" : "https://www.ibm.com/support/docview.wss?uid=ibm10719667",
"title" : "IBM Security Bulletin 719667 (Spectrum Symphony)" "refsource" : "CONFIRM",
"url" : "https://www.ibm.com/support/docview.wss?uid=ibm10719667"
}, },
{ {
"title" : "X-Force Vulnerability Report", "name" : "ibm-symphony-cve20181708-info-disc(146343)",
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/146343", "refsource" : "XF",
"name" : "ibm-symphony-cve20181708-info-disc (146343)", "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/146343"
"refsource" : "XF"
} }
] ]
},
"CVE_data_meta" : {
"ASSIGNER" : "psirt@us.ibm.com",
"ID" : "CVE-2018-1708",
"DATE_PUBLIC" : "2018-08-01T00:00:00",
"STATE" : "PUBLIC"
},
"impact" : {
"cvssv3" : {
"TM" : {
"RL" : "O",
"RC" : "C",
"E" : "U"
},
"BM" : {
"AV" : "N",
"PR" : "L",
"A" : "N",
"SCORE" : "6.500",
"AC" : "L",
"I" : "N",
"UI" : "N",
"C" : "H",
"S" : "U"
}
}
} }
} }

96
2018/1xxx/CVE-2018-1724.json
View File

@ -1,53 +1,14 @@
{ {
"impact" : {
"cvssv3" : {
"BM" : {
"UI" : "N",
"I" : "H",
"S" : "U",
"C" : "H",
"AC" : "L",
"AV" : "L",
"SCORE" : "8.400",
"A" : "H",
"PR" : "N"
},
"TM" : {
"E" : "U",
"RC" : "C",
"RL" : "O"
}
}
},
"CVE_data_meta" : { "CVE_data_meta" : {
"ID" : "CVE-2018-1724",
"ASSIGNER" : "psirt@us.ibm.com", "ASSIGNER" : "psirt@us.ibm.com",
"STATE" : "PUBLIC", "DATE_PUBLIC" : "2018-10-07T00:00:00",
"DATE_PUBLIC" : "2018-10-07T00:00:00" "ID" : "CVE-2018-1724",
"STATE" : "PUBLIC"
}, },
"data_format" : "MITRE",
"references" : {
"reference_data" : [
{
"title" : "IBM Security Bulletin 718373 (Spectrum LSF)",
"refsource" : "CONFIRM",
"name" : "https://www.ibm.com/blogs/psirt/ibm-security-bulletin-ibm-spectrum-lsf-is-affected-by-a-privilege-escalation-vulnerability/",
"url" : "https://www.ibm.com/blogs/psirt/ibm-security-bulletin-ibm-spectrum-lsf-is-affected-by-a-privilege-escalation-vulnerability/"
},
{
"refsource" : "XF",
"name" : "ibm-lsf-cve20181724-priv-escalation (147439)",
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/147439",
"title" : "X-Force Vulnerability Report"
}
]
},
"data_type" : "CVE",
"affects" : { "affects" : {
"vendor" : { "vendor" : {
"vendor_data" : [ "vendor_data" : [
{ {
"vendor_name" : "IBM",
"product" : { "product" : {
"product_data" : [ "product_data" : [
{ {
@ -70,29 +31,66 @@
} }
} }
] ]
} },
"vendor_name" : "IBM"
} }
] ]
} }
}, },
"data_format" : "MITRE",
"data_type" : "CVE",
"data_version" : "4.0", "data_version" : "4.0",
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "IBM Spectrum LSF 9.1.1 9.1.2, 9.1.3, and 10.1 could allow a local user to obtain highly sensitive information or escalate their privileges to root due to improper file permission settings. IBM X-Force ID: 147439."
}
]
},
"impact" : {
"cvssv3" : {
"BM" : {
"A" : "H",
"AC" : "L",
"AV" : "L",
"C" : "H",
"I" : "H",
"PR" : "N",
"S" : "U",
"SCORE" : "8.400",
"UI" : "N"
},
"TM" : {
"E" : "U",
"RC" : "C",
"RL" : "O"
}
}
},
"problemtype" : { "problemtype" : {
"problemtype_data" : [ "problemtype_data" : [
{ {
"description" : [ "description" : [
{ {
"value" : "Gain Privileges", "lang" : "eng",
"lang" : "eng" "value" : "Gain Privileges"
} }
] ]
} }
] ]
}, },
"description" : { "references" : {
"description_data" : [ "reference_data" : [
{ {
"value" : "IBM Spectrum LSF 9.1.1 9.1.2, 9.1.3, and 10.1 could allow a local user to obtain highly sensitive information or escalate their privileges to root due to improper file permission settings. IBM X-Force ID: 147439.", "name" : "https://www.ibm.com/blogs/psirt/ibm-security-bulletin-ibm-spectrum-lsf-is-affected-by-a-privilege-escalation-vulnerability/",
"lang" : "eng" "refsource" : "CONFIRM",
"url" : "https://www.ibm.com/blogs/psirt/ibm-security-bulletin-ibm-spectrum-lsf-is-affected-by-a-privilege-escalation-vulnerability/"
},
{
"name" : "ibm-lsf-cve20181724-priv-escalation(147439)",
"refsource" : "XF",
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/147439"
} }
] ]
} }

92
2018/1xxx/CVE-2018-1738.json
View File

@ -1,25 +1,10 @@
{ {
"description" : { "CVE_data_meta" : {
"description_data" : [ "ASSIGNER" : "psirt@us.ibm.com",
{ "DATE_PUBLIC" : "2018-10-04T00:00:00",
"lang" : "eng", "ID" : "CVE-2018-1738",
"value" : "IBM Security Key Lifecycle Manager 2.6, 2.7, 3.0 could allow an authenticated user to obtain highly sensitive information or jeopardize system integrity due to improper authentication mechanisms. IBM X-Force ID: 147907." "STATE" : "PUBLIC"
}
]
}, },
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"value" : "Gain Access",
"lang" : "eng"
}
]
}
]
},
"data_version" : "4.0",
"affects" : { "affects" : {
"vendor" : { "vendor" : {
"vendor_data" : [ "vendor_data" : [
@ -27,6 +12,7 @@
"product" : { "product" : {
"product_data" : [ "product_data" : [
{ {
"product_name" : "Security Key Lifecycle Manager",
"version" : { "version" : {
"version_data" : [ "version_data" : [
{ {
@ -39,8 +25,7 @@
"version_value" : "3.0" "version_value" : "3.0"
} }
] ]
}, }
"product_name" : "Security Key Lifecycle Manager"
} }
] ]
}, },
@ -49,42 +34,29 @@
] ]
} }
}, },
"data_type" : "CVE",
"data_format" : "MITRE", "data_format" : "MITRE",
"references" : { "data_type" : "CVE",
"reference_data" : [ "data_version" : "4.0",
"description" : {
"description_data" : [
{ {
"title" : "IBM Security Bulletin 733309 (Security Key Lifecycle Manager)", "lang" : "eng",
"url" : "http://www.ibm.com/support/docview.wss?uid=ibm10733309", "value" : "IBM Security Key Lifecycle Manager 2.6, 2.7, 3.0 could allow an authenticated user to obtain highly sensitive information or jeopardize system integrity due to improper authentication mechanisms. IBM X-Force ID: 147907."
"name" : "http://www.ibm.com/support/docview.wss?uid=ibm10733309",
"refsource" : "CONFIRM"
},
{
"refsource" : "XF",
"name" : "ibm-tivoli-cve20181738-improper-auth (147907)",
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/147907",
"title" : "X-Force Vulnerability Report"
} }
] ]
}, },
"CVE_data_meta" : {
"STATE" : "PUBLIC",
"DATE_PUBLIC" : "2018-10-04T00:00:00",
"ASSIGNER" : "psirt@us.ibm.com",
"ID" : "CVE-2018-1738"
},
"impact" : { "impact" : {
"cvssv3" : { "cvssv3" : {
"BM" : { "BM" : {
"I" : "L", "A" : "N",
"UI" : "N",
"S" : "U",
"C" : "H",
"AC" : "L", "AC" : "L",
"AV" : "N", "AV" : "N",
"C" : "H",
"I" : "L",
"PR" : "L",
"S" : "U",
"SCORE" : "7.100", "SCORE" : "7.100",
"A" : "N", "UI" : "N"
"PR" : "L"
}, },
"TM" : { "TM" : {
"E" : "U", "E" : "U",
@ -92,5 +64,31 @@
"RL" : "O" "RL" : "O"
} }
} }
},
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng",
"value" : "Gain Access"
}
]
}
]
},
"references" : {
"reference_data" : [
{
"name" : "http://www.ibm.com/support/docview.wss?uid=ibm10733309",
"refsource" : "CONFIRM",
"url" : "http://www.ibm.com/support/docview.wss?uid=ibm10733309"
},
{
"name" : "ibm-tivoli-cve20181738-improper-auth(147907)",
"refsource" : "XF",
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/147907"
}
]
} }
} }

94
2018/1xxx/CVE-2018-1745.json
View File

@ -1,48 +1,10 @@
{ {
"impact" : {
"cvssv3" : {
"BM" : {
"AV" : "N",
"PR" : "N",
"SCORE" : "7.500",
"A" : "H",
"AC" : "L",
"I" : "N",
"UI" : "N",
"C" : "N",
"S" : "U"
},
"TM" : {
"E" : "U",
"RC" : "C",
"RL" : "O"
}
}
},
"references" : {
"reference_data" : [
{
"url" : "https://www.ibm.com/support/docview.wss?uid=ibm10733355",
"name" : "https://www.ibm.com/support/docview.wss?uid=ibm10733355",
"refsource" : "CONFIRM",
"title" : "IBM Security Bulletin 733355 (Security Key Lifecycle Manager)"
},
{
"name" : "ibm-tivoli-cve20181745-dos (148424)",
"refsource" : "XF",
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/148424",
"title" : "X-Force Vulnerability Report"
}
]
},
"data_format" : "MITRE",
"CVE_data_meta" : { "CVE_data_meta" : {
"ID" : "CVE-2018-1745",
"ASSIGNER" : "psirt@us.ibm.com", "ASSIGNER" : "psirt@us.ibm.com",
"STATE" : "PUBLIC", "DATE_PUBLIC" : "2018-10-04T00:00:00",
"DATE_PUBLIC" : "2018-10-04T00:00:00" "ID" : "CVE-2018-1745",
"STATE" : "PUBLIC"
}, },
"data_type" : "CVE",
"affects" : { "affects" : {
"vendor" : { "vendor" : {
"vendor_data" : [ "vendor_data" : [
@ -50,6 +12,7 @@
"product" : { "product" : {
"product_data" : [ "product_data" : [
{ {
"product_name" : "Security Key Lifecycle Manager",
"version" : { "version" : {
"version_data" : [ "version_data" : [
{ {
@ -59,8 +22,7 @@
"version_value" : "3.0" "version_value" : "3.0"
} }
] ]
}, }
"product_name" : "Security Key Lifecycle Manager"
} }
] ]
}, },
@ -69,6 +31,37 @@
] ]
} }
}, },
"data_format" : "MITRE",
"data_type" : "CVE",
"data_version" : "4.0",
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "IBM Security Key Lifecycle Manager 2.7 and 3.0 could allow an unauthenticated user to restart the SKLM server due to missing authentication. IBM X-Force ID: 148424."
}
]
},
"impact" : {
"cvssv3" : {
"BM" : {
"A" : "H",
"AC" : "L",
"AV" : "N",
"C" : "N",
"I" : "N",
"PR" : "N",
"S" : "U",
"SCORE" : "7.500",
"UI" : "N"
},
"TM" : {
"E" : "U",
"RC" : "C",
"RL" : "O"
}
}
},
"problemtype" : { "problemtype" : {
"problemtype_data" : [ "problemtype_data" : [
{ {
@ -81,12 +74,17 @@
} }
] ]
}, },
"data_version" : "4.0", "references" : {
"description" : { "reference_data" : [
"description_data" : [
{ {
"lang" : "eng", "name" : "https://www.ibm.com/support/docview.wss?uid=ibm10733355",
"value" : "IBM Security Key Lifecycle Manager 2.7 and 3.0 could allow an unauthenticated user to restart the SKLM server due to missing authentication. IBM X-Force ID: 148424." "refsource" : "CONFIRM",
"url" : "https://www.ibm.com/support/docview.wss?uid=ibm10733355"
},
{
"name" : "ibm-tivoli-cve20181745-dos(148424)",
"refsource" : "XF",
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/148424"
} }
] ]
} }