4.3
Medium
CVE-2018-1935 IBM Connections 5.0, 5.5, and 6.0 could allow an authenticated user to obtain sensitive information from invalid request…
Description
IBM Connections 5.0, 5.5, and 6.0 could allow an authenticated user to obtain sensitive information from invalid request error messages. IBM X-Force ID: 153315.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Connections | 6.0 | No fix stated |
| Connections | 5.5 | No fix stated |
| Connections | 5.0 | No fix stated |
Other CVEs of Connections
The 9 CVEs of Connections →
CVE-2019-4403
IBM Connections 6.0 is vulnerable to cross-site scripting
5.4
Medium
CVE-2018-1896
IBM Connections 5.0, 5.5, and 6.0 is vulnerable to possible host header injection attack that could cause navigation…
4.6
Medium
CVE-2018-1791
IBM Connections 5.0, 5.5, and 6.0 is vulnerable to an External Service Interaction attack, caused by improper validation…
4.9
Medium
CVE-2017-1748
IBM Connections 5.0, 5.5, and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect…
6.8
Medium