CVE-2018-1000181

Published: Jun 5, 2018Modified: Nov 21, 2024

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Kitura 2.3.0 and earlier have an unintended read access to unauthorised files and folders that can be exploited by a crafted URL resulting in information disclosure.

Affected (1)

Products: Ibm: Kitura

Ibm

1 product

Kitura

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ibm Kitura	Up to 2.3.0

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://github.com/IBM-Swift/Kitura/pull/1278

Source: cve@mitre.org

Vendor Advisory

https://github.com/IBM-Swift/Kitura/pull/1278

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.