CVE-2018-1454 - IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security

Back Back to CVE browser

MEDIUM

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security

Published Jun 5, 2018

5.9

MEDIUM

CVSS 3.0

EPSS 1.48%

Description

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 140089.

Affected products

Vendor IBM Product InfoSphere Information Server Default
n/a
- Version
  11.3
  Status
  affected
  Constraints
  -
- Version
  11.5
  Status
  affected
  Constraints
  -
- Version
  11.7
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

InfoSphere Information Server

n/a

Version	Status	Constraints
11.3	affected	-
11.5	affected	-
11.7	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-319

References (3)

http://www.ibm.com/support/docview.wss?uid=swg22015222
x_refsource_CONFIRMVendor Advisory
http://www.securitytracker.com/id/1041038
vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/140089
vdb-entryx_refsource_XFThird Party AdvisoryVDB Entry

Link	Providers	Tags
http://www.ibm.com/support/docview.wss?uid=swg22015222		x_refsource_CONFIRMVendor Advisory
http://www.securitytracker.com/id/1041038		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/140089		vdb-entryx_refsource_XFThird Party AdvisoryVDB Entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ibm

Published Jun 5, 2018

Updated Sep 16, 2024

Reserved Dec 13, 2017

Link CVE-2018-1454

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-1454

Red Hat

Severity n/a

Public date n/a

Links CVE-2018-1454