CVE-2018-1664

Published: Sep 25, 2018Modified: Nov 21, 2024

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

IBM DataPower Gateway 7.1.0.0 - 7.1.0.23, 7.2.0.0 - 7.2.0.21, 7.5.0.0 - 7.5.0.16, 7.5.1.0 - 7.5.1.15, 7.5.2.0 - 7.5.2.15, and 7.6.0.0 - 7.6.0.8 as well as IBM DataPower Gateway CD 7.7.0.0 - 7.7.1.2 echoing of AMP management interface authorization headers exposes login credentials in browser cache. IBM X-Force ID: 144890.

Affected (7)

Products: Ibm: Datapower Gateway

Ibm

1 product

Datapower Gateway

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Ibm Datapower Gateway	From 7.1.0.0 to 7.1.0.23
Ibm Datapower Gateway	From 7.2.0.0 to 7.2.0.21
Ibm Datapower Gateway	From 7.5.0.0 to 7.5.0.16
Ibm Datapower Gateway	From 7.5.1.0 to 7.5.1.15
Ibm Datapower Gateway	From 7.5.2.0 to 7.5.2.15
Ibm Datapower Gateway	From 7.6.0.0 to 7.6.0.8
Ibm Datapower Gateway	From 7.7.0.0 to 7.7.1.2

References (4)

https://exchange.xforce.ibmcloud.com/vulnerabilities/144890

Source: psirt@us.ibm.com

VDB EntryVendor Advisory

https://www.ibm.com/support/docview.wss?uid=ibm10730509

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/144890

Source: af854a3a-2127-422b-91ae-364da2661108

VDB EntryVendor Advisory

https://www.ibm.com/support/docview.wss?uid=ibm10730509

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.