CVE-2018-1640

IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote authenticated attacker to execute arbitrary commands on the system

High · published April 2, 2019

CVSS v3.0
8.8
EPSS
4%
Percentile
89.5
In the wild
Unconfirmed
What it is

IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 144580.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/UI:N/C:H/S:U/AC:L/PR:L/AV:N/A:H/I:H/RC:C/RL:O/E:U
CVSS v4.0
Not supplied
EPSS
0.03644 · 89.5th percentile
Published
2019-04-02T13:20Z
EPSS history
Timeline
  • 02 APR 13:20Z
    IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote authenticated attacker to execute arbitrary commands on the system
    cvelistv5