CVE-2018-1888

An untrusted search path vulnerability in IBM i Access for Windows versions 7.1 and earlier on Windows can allow arbitrary code execution via a Trojan horse…

Medium · published January 4, 2019

CVSS v3.0
5.3
EPSS
1%
Percentile
68.9
In the wild
Unconfirmed
What it is

An untrusted search path vulnerability in IBM i Access for Windows versions 7.1 and earlier on Windows can allow arbitrary code execution via a Trojan horse DLL in the current working directory, related to use of the LoadLibrary function. IBM X-Force ID: 152079.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/A:L/AC:L/AV:L/C:L/I:L/PR:N/S:U/UI:R/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.01245 · 68.9th percentile
Published
2019-01-04T15:00Z
EPSS history
Timeline
  • 04 JAN 15:00Z
    An untrusted search path vulnerability in IBM i Access for Windows versions 7.1 and earlier on Windows can allow arbitrary code execution via a Trojan horse…
    cvelistv5