5
CVSSv2

CVE-2018-1668

Published: 29/01/2019 Updated: 24/08/2020
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

IBM DataPower Gateway 7.5.0.0 up to and including 7.5.0.19, 7.5.1.0 up to and including 7.5.1.18, 7.5.2.0 up to and including 7.5.2.18, and 7.6.0.0 up to and including 7.6.0.11 appliances allows "null" logins which could give read access to IPMI data to obtain sensitive information. IBM X-Force ID: 144894.

Most Upvoted Vulmon Research Post

There is no Researcher post for this vulnerability
Would you like to share something about it? Sign up now to share your knowledge with the community.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

ibm datapower gateway

Vendor Advisories

IBM MQ Appliance has addressed the following unauthorized access vulnerability ...
IBM DataPower Gateway Appliances has addressed the following vulnerability: CVE-2018-1668 ...