CVE-2018-1771 - Vulnerability Details

Vendors	Products
Ibm	Domino Notes

Link	Providers
https://exchange.xforce.ibmcloud.com/vulnerabilities/148687
https://www.ibm.com/support/docview.wss?uid=ibm10743405

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "Domino", "vendor": "IBM", "versions": [{"status": "affected", "version": "9.0.1"}, {"status": "affected", "version": "9.0"}]}], "datePublic": "2018-12-18T00:00:00", "descriptions": [{"lang": "en", "value": "IBM Domino 9.0 and 9.0.1 could allow an attacker to execute commands on the system by triggering a buffer overflow in the parsing of command line arguments passed to nsd.exe. IBM X-force ID: 148687."}], "metrics": [{"cvssV3_0": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "exploitCodeMaturity": "UNPROVEN", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "remediationLevel": "OFFICIAL_FIX", "reportConfidence": "CONFIRMED", "scope": "UNCHANGED", "temporalScore": 7.3, "temporalSeverity": "HIGH", "userInteraction": "NONE", "vectorString": "CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O", "version": "3.0"}}], "problemTypes": [{"descriptions": [{"description": "Gain Privileges", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-12-20T13:57:01", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm"}, "references": [{"name": "ibm-notes-cve20181771-priv-escalation(148687)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/148687"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://www.ibm.com/support/docview.wss?uid=ibm10743405"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@us.ibm.com", "DATE_PUBLIC": "2018-12-18T00:00:00", "ID": "CVE-2018-1771", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Domino", "version": {"version_data": [{"version_value": "9.0.1"}, {"version_value": "9.0"}]}}]}, "vendor_name": "IBM"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "IBM Domino 9.0 and 9.0.1 could allow an attacker to execute commands on the system by triggering a buffer overflow in the parsing of command line arguments passed to nsd.exe. IBM X-force ID: 148687."}]}, "impact": {"cvssv3": {"BM": {"A": "H", "AC": "L", "AV": "L", "C": "H", "I": "H", "PR": "N", "S": "U", "UI": "N"}, "TM": {"E": "U", "RC": "C", "RL": "O"}}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Gain Privileges"}]}]}, "references": {"reference_data": [{"name": "ibm-notes-cve20181771-priv-escalation(148687)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/148687"}, {"name": "https://www.ibm.com/support/docview.wss?uid=ibm10743405", "refsource": "CONFIRM", "url": "https://www.ibm.com/support/docview.wss?uid=ibm10743405"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T04:07:44.302Z"}, "title": "CVE Program Container", "references": [{"name": "ibm-notes-cve20181771-priv-escalation(148687)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/148687"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://www.ibm.com/support/docview.wss?uid=ibm10743405"}]}]}, "cveMetadata": {"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2018-1771", "datePublished": "2018-12-20T14:00:00Z", "dateReserved": "2017-12-13T00:00:00", "dateUpdated": "2024-09-17T03:02:20.079Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : Domino (string)

vendor : IBM (string)

versions : [ »

0 : { »

status : affected (string)

version : 9.0.1 (string)

}

1 : { »

status : affected (string)

version : 9.0 (string)

}

]

}

]

datePublic : 2018-12-18T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : IBM Domino 9.0 and 9.0.1 could allow an attacker to execute commands on the system by triggering a buffer overflow in the parsing of command line arguments passed to nsd.exe. IBM X-force ID: 148687. (string)

}

]

metrics : [ »

0 : { »

cvssV3_0 : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 8.4 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

exploitCodeMaturity : UNPROVEN (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

remediationLevel : OFFICIAL_FIX (string)

reportConfidence : CONFIRMED (string)

scope : UNCHANGED (string)

temporalScore : 7.3 (number)

temporalSeverity : HIGH (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O (string)

version : 3.0 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : Gain Privileges (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2018-12-20T13:57:01 (string)

orgId : 9a959283-ebb5-44b6-b705-dcc2bbced522 (string)

shortName : ibm (string)

}

references : [ »

0 : { »

name : ibm-notes-cve20181771-priv-escalation(148687) (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_XF (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/148687 (string)

}

1 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : https://www.ibm.com/support/docview.wss?uid=ibm10743405 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : psirt@us.ibm.com (string)

DATE_PUBLIC : 2018-12-18T00:00:00 (string)

ID : CVE-2018-1771 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : Domino (string)

version : { »

version_data : [ »

0 : { »

version_value : 9.0.1 (string)

}

1 : { »

version_value : 9.0 (string)

}

]

}

]

}

vendor_name : IBM (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : IBM Domino 9.0 and 9.0.1 could allow an attacker to execute commands on the system by triggering a buffer overflow in the parsing of command line arguments passed to nsd.exe. IBM X-force ID: 148687. (string)

}

]

}

impact : { »

cvssv3 : { »

BM : { »

A : H (string)

AC : L (string)

AV : L (string)

C : H (string)

I : H (string)

PR : N (string)

S : U (string)

UI : N (string)

}

TM : { »

E : U (string)

RC : C (string)

RL : O (string)

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : Gain Privileges (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : ibm-notes-cve20181771-priv-escalation(148687) (string)

refsource : XF (string)

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/148687 (string)

}

1 : { »

name : https://www.ibm.com/support/docview.wss?uid=ibm10743405 (string)

refsource : CONFIRM (string)

url : https://www.ibm.com/support/docview.wss?uid=ibm10743405 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-05T04:07:44.302Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

name : ibm-notes-cve20181771-priv-escalation(148687) (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_XF (string)

2 : x_transferred (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/148687 (string)

}

1 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : https://www.ibm.com/support/docview.wss?uid=ibm10743405 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 9a959283-ebb5-44b6-b705-dcc2bbced522 (string)

assignerShortName : ibm (string)

cveId : CVE-2018-1771 (string)

datePublished : 2018-12-20T14:00:00Z (string)

dateReserved : 2017-12-13T00:00:00 (string)

dateUpdated : 2024-09-17T03:02:20.079Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:domino:*:*:*:*:*:*:*:*", "matchCriteriaId": "B2ABCCAF-0BAF-43D0-9CC9-07208DAF824F", "versionEndIncluding": "9.0.1.10", "versionStartIncluding": "9.0.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:domino:9.0.0.0:if1:*:*:*:*:*:*", "matchCriteriaId": "95B0C353-47E1-422D-B91B-4B764D248292", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:domino:9.0.0.0:if2:*:*:*:*:*:*", "matchCriteriaId": "D3950AE9-589C-46F7-8A3E-EB15D8E9227B", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:domino:9.0.0.0:if3:*:*:*:*:*:*", "matchCriteriaId": "404E56E1-230C-4A8A-A688-5E06BC8E7E52", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:domino:9.0.0.0:if4:*:*:*:*:*:*", "matchCriteriaId": "5701F2D9-F0D0-4294-96FA-EF953E11D41A", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:domino:9.0.1.10:if1:*:*:*:*:*:*", "matchCriteriaId": "6D46F74B-B11C-4896-9643-854DA5038BC2", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:domino:9.0.1.10:if2:*:*:*:*:*:*", "matchCriteriaId": "3D133CFA-9EC2-4B32-A956-6146857CD032", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:domino:9.0.1.10:if3:*:*:*:*:*:*", "matchCriteriaId": "8DD76DBD-5EFA-4880-B872-165548A9B0A5", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:domino:9.0.1.10:if4:*:*:*:*:*:*", "matchCriteriaId": "E61C8493-3F84-4B90-8D11-29E690960D07", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:notes:*:*:*:*:*:*:*:*", "matchCriteriaId": "863D67C1-FC55-4E89-83AF-9BEE3B990CBE", "versionEndIncluding": "9.0.1.10", "versionStartIncluding": "9.0.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:notes:9.0.0.0:if1:*:*:*:*:*:*", "matchCriteriaId": "853E12FE-40EB-40ED-9245-7CBD05D9BEC9", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:notes:9.0.0.0:if2:*:*:*:*:*:*", "matchCriteriaId": "EBC3B7DB-578E-4C0E-9598-03D791094AC7", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:notes:9.0.0.0:if3:*:*:*:*:*:*", "matchCriteriaId": "E9CF936F-00EF-4DD7-B80B-47D64866AE88", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:notes:9.0.0.0:if4:*:*:*:*:*:*", "matchCriteriaId": "FD2E5893-C2FA-4191-B861-39E60BB60979", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:notes:9.0.1.10:if1:*:*:*:*:*:*", "matchCriteriaId": "9BC3FE1F-B09F-4B65-855A-41E8BF522E6A", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:notes:9.0.1.10:if2:*:*:*:*:*:*", "matchCriteriaId": "EDB9DABC-51B3-459C-924C-167AC1D572DD", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:notes:9.0.1.10:if3:*:*:*:*:*:*", "matchCriteriaId": "ECC028B6-D9A6-4CB8-A074-7A36694E3356", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:notes:9.0.1.10:if4:*:*:*:*:*:*", "matchCriteriaId": "8C7450F2-09D0-466E-8F18-F213CCFD5081", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:notes:9.0.1.10:if5:*:*:*:*:*:*", "matchCriteriaId": "D568103C-FFF1-4D2F-8C22-3D3AA39DD533", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "IBM Domino 9.0 and 9.0.1 could allow an attacker to execute commands on the system by triggering a buffer overflow in the parsing of command line arguments passed to nsd.exe. IBM X-force ID: 148687."}, {"lang": "es", "value": "IBM Domino 9.0 y 9.0.1 podr\u00eda permitir que un atacante ejecute comandos en el sistema desencadenando un desbordamiento de b\u00fafer en el an\u00e1lisis de los argumentos de la l\u00ednea de comandos que se pasan a nsd.exe. IBM X-Force ID: 148687."}], "id": "CVE-2018-1771", "lastModified": "2024-11-21T04:00:20.303", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 2.5, "impactScore": 5.9, "source": "psirt@us.ibm.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-12-20T14:29:00.387", "references": [{"source": "psirt@us.ibm.com", "tags": ["VDB Entry", "Vendor Advisory"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/148687"}, {"source": "psirt@us.ibm.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://www.ibm.com/support/docview.wss?uid=ibm10743405"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["VDB Entry", "Vendor Advisory"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/148687"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://www.ibm.com/support/docview.wss?uid=ibm10743405"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:ibm:domino:*:*:*:*:*:*:*:* (string)

matchCriteriaId : B2ABCCAF-0BAF-43D0-9CC9-07208DAF824F (string)

versionEndIncluding : 9.0.1.10 (string)

versionStartIncluding : 9.0.1.0 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:ibm:domino:9.0.0.0:if1:*:*:*:*:*:* (string)

matchCriteriaId : 95B0C353-47E1-422D-B91B-4B764D248292 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:ibm:domino:9.0.0.0:if2:*:*:*:*:*:* (string)

matchCriteriaId : D3950AE9-589C-46F7-8A3E-EB15D8E9227B (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:ibm:domino:9.0.0.0:if3:*:*:*:*:*:* (string)

matchCriteriaId : 404E56E1-230C-4A8A-A688-5E06BC8E7E52 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:ibm:domino:9.0.0.0:if4:*:*:*:*:*:* (string)

matchCriteriaId : 5701F2D9-F0D0-4294-96FA-EF953E11D41A (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:ibm:domino:9.0.1.10:if1:*:*:*:*:*:* (string)

matchCriteriaId : 6D46F74B-B11C-4896-9643-854DA5038BC2 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:ibm:domino:9.0.1.10:if2:*:*:*:*:*:* (string)

matchCriteriaId : 3D133CFA-9EC2-4B32-A956-6146857CD032 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:ibm:domino:9.0.1.10:if3:*:*:*:*:*:* (string)

matchCriteriaId : 8DD76DBD-5EFA-4880-B872-165548A9B0A5 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:ibm:domino:9.0.1.10:if4:*:*:*:*:*:* (string)

matchCriteriaId : E61C8493-3F84-4B90-8D11-29E690960D07 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:ibm:notes:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 863D67C1-FC55-4E89-83AF-9BEE3B990CBE (string)

versionEndIncluding : 9.0.1.10 (string)

versionStartIncluding : 9.0.1.0 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:ibm:notes:9.0.0.0:if1:*:*:*:*:*:* (string)

matchCriteriaId : 853E12FE-40EB-40ED-9245-7CBD05D9BEC9 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:ibm:notes:9.0.0.0:if2:*:*:*:*:*:* (string)

matchCriteriaId : EBC3B7DB-578E-4C0E-9598-03D791094AC7 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:ibm:notes:9.0.0.0:if3:*:*:*:*:*:* (string)

matchCriteriaId : E9CF936F-00EF-4DD7-B80B-47D64866AE88 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:ibm:notes:9.0.0.0:if4:*:*:*:*:*:* (string)

matchCriteriaId : FD2E5893-C2FA-4191-B861-39E60BB60979 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:ibm:notes:9.0.1.10:if1:*:*:*:*:*:* (string)

matchCriteriaId : 9BC3FE1F-B09F-4B65-855A-41E8BF522E6A (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:ibm:notes:9.0.1.10:if2:*:*:*:*:*:* (string)

matchCriteriaId : EDB9DABC-51B3-459C-924C-167AC1D572DD (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:ibm:notes:9.0.1.10:if3:*:*:*:*:*:* (string)

matchCriteriaId : ECC028B6-D9A6-4CB8-A074-7A36694E3356 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:ibm:notes:9.0.1.10:if4:*:*:*:*:*:* (string)

matchCriteriaId : 8C7450F2-09D0-466E-8F18-F213CCFD5081 (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:ibm:notes:9.0.1.10:if5:*:*:*:*:*:* (string)

matchCriteriaId : D568103C-FFF1-4D2F-8C22-3D3AA39DD533 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : IBM Domino 9.0 and 9.0.1 could allow an attacker to execute commands on the system by triggering a buffer overflow in the parsing of command line arguments passed to nsd.exe. IBM X-force ID: 148687. (string)

}

1 : { »

lang : es (string)

value : IBM Domino 9.0 y 9.0.1 podría permitir que un atacante ejecute comandos en el sistema desencadenando un desbordamiento de búfer en el análisis de los argumentos de la línea de comandos que se pasan a nsd.exe. IBM X-Force ID: 148687. (string)

}

]

id : CVE-2018-1771 (string)

lastModified : 2024-11-21T04:00:20.303 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : HIGH (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : LOCAL (string)

authentication : NONE (string)

availabilityImpact : COMPLETE (string)

baseScore : 7.2 (number)

confidentialityImpact : COMPLETE (string)

integrityImpact : COMPLETE (string)

vectorString : AV:L/AC:L/Au:N/C:C/I:C/A:C (string)

version : 2.0 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 10 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 8.4 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.0 (string)

}

exploitabilityScore : 2.5 (number)

impactScore : 5.9 (number)

source : psirt@us.ibm.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 7.8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.0 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2018-12-20T14:29:00.387 (string)

references : [ »

0 : { »

source : psirt@us.ibm.com (string)

tags : [ »

0 : VDB Entry (string)

1 : Vendor Advisory (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/148687 (string)

}

1 : { »

source : psirt@us.ibm.com (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : https://www.ibm.com/support/docview.wss?uid=ibm10743405 (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : VDB Entry (string)

1 : Vendor Advisory (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/148687 (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : https://www.ibm.com/support/docview.wss?uid=ibm10743405 (string)

}

]

sourceIdentifier : psirt@us.ibm.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-119 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object