cvelist/2018/1xxx/CVE-2018-1999.json
2019-04-08 15:00:46 +00:00

96 lines
3.0 KiB
JSON

{
"impact": {
"cvssv3": {
"BM": {
"AV": "N",
"S": "U",
"UI": "N",
"AC": "L",
"C": "L",
"SCORE": "4.300",
"PR": "L",
"A": "N",
"I": "N"
},
"TM": {
"RC": "C",
"E": "U",
"RL": "O"
}
}
},
"data_type": "CVE",
"data_version": "4.0",
"references": {
"reference_data": [
{
"title": "IBM Security Bulletin 870502 (Business Automation Workflow)",
"name": "https://www.ibm.com/support/docview.wss?uid=ibm10870502",
"url": "https://www.ibm.com/support/docview.wss?uid=ibm10870502",
"refsource": "CONFIRM"
},
{
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/154889",
"name": "ibm-bpm-cve20181999-info-disc (154889)",
"title": "X-Force Vulnerability Report"
}
]
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could reveal sensitive version information about the server from error pages that could aid an attacker in further attacks against the system. IBM X-Force ID: 154889."
}
]
},
"CVE_data_meta": {
"ASSIGNER": "psirt@us.ibm.com",
"ID": "CVE-2018-1999",
"DATE_PUBLIC": "2019-04-04T00:00:00",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "IBM",
"product": {
"product_data": [
{
"product_name": "Business Automation Workflow",
"version": {
"version_data": [
{
"version_value": "18.0.0.0"
},
{
"version_value": "18.0.0.1"
},
{
"version_value": "18.0.0.2"
}
]
}
}
]
}
}
]
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"value": "Obtain Information",
"lang": "eng"
}
]
}
]
},
"data_format": "MITRE"
}