Vulnerability Details CVE-2018-1935
IBM Connections 5.0, 5.5, and 6.0 could allow an authenticated user to obtain sensitive information from invalid request error messages. IBM X-Force ID: 153315.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 39.2%
CVSS Severity
CVSS v3 Score 4.3
CVSS v2 Score 4.0
References
- http://www.securityfocus.com/bid/106134
- https://exchange.xforce.ibmcloud.com/vulnerabilities/153315
- https://www.ibm.com/support/docview.wss?uid=ibm10742575
- http://www.securityfocus.com/bid/106134
- https://exchange.xforce.ibmcloud.com/vulnerabilities/153315
- https://www.ibm.com/support/docview.wss?uid=ibm10742575
Products affected by CVE-2018-1935
-
cpe:2.3:a:ibm:connections:5.0
-
cpe:2.3:a:ibm:connections:5.5
-
cpe:2.3:a:ibm:connections:6.0