IBM InfoSphere Information Server CVE-2018-1917 Information Disclosure Vulnerability

Bugtraq ID:	107688
Class:	Design Error
CVE:	CVE-2018-1917
Remote:	Yes
Local:	No
Published:	Mar 29 2019 12:00AM
Updated:	Mar 29 2019 12:00AM
Credit:	IBM
Vulnerable:	IBM InfoSphere Information Server on Cloud 11.7 IBM InfoSphere Information Server on Cloud 11.5 IBM InfoSphere Information Server 11.7 IBM InfoSphere Information Server 11.5 IBM InfoSphere Information Server 11.3
Not Vulnerable:	IBM InfoSphere Information Server on Cloud 11.7.0.1 IBM InfoSphere Information Server on Cloud 11.5.0.2

IBM InfoSphere Information Server CVE-2018-1917 Information Disclosure Vulnerability

IBM InfoSphere Information Server is prone to an information-disclosure vulnerability.

Attackers can exploit this issue to obtain sensitive information that may lead to further attacks.

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 are vulnerable.

IBM InfoSphere Information Server CVE-2018-1917 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM InfoSphere Information Server CVE-2018-1917 Information Disclosure Vulnerability

References:

• IBM Homepage (IBM)
  
• Security Bulletin: IBM InfoSphere Information Server is affected by an Informat (IBM)