4.3
Moyenne
CVE-2018-1935 IBM Connections 5.0, 5.5, and 6.0 could allow an authenticated user to obtain sensitive information from invalid request…
Description
IBM Connections 5.0, 5.5, and 6.0 could allow an authenticated user to obtain sensitive information from invalid request error messages. IBM X-Force ID: 153315.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Connections | 6.0 | Pas de correctif indiqué |
| Connections | 5.5 | Pas de correctif indiqué |
| Connections | 5.0 | Pas de correctif indiqué |
Autres CVE de Connections
Les 9 CVE de Connections →
CVE-2019-4403
IBM Connections 6.0 is vulnerable to cross-site scripting
5.4
Moyenne
CVE-2018-1896
IBM Connections 5.0, 5.5, and 6.0 is vulnerable to possible host header injection attack that could cause navigation…
4.6
Moyenne
CVE-2018-1791
IBM Connections 5.0, 5.5, and 6.0 is vulnerable to an External Service Interaction attack, caused by improper validation…
4.9
Moyenne
CVE-2017-1748
IBM Connections 5.0, 5.5, and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect…
6.8
Moyenne