Lucene search

[email protected]CVE-2018-1388

HistoryFeb 07, 2018 - 5:29 p.m.

CVE-2018-1388

2018-02-0717:29:01

CWE-200

[email protected]

web.nvd.nist.gov

cve-2018-1388

gskit v7

side channel information

pkcs#1 padding

ibm x-force id

138212

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.1%

JSON

GSKit V7 may disclose side channel information via discrepancies between valid and invalid PKCS#1 padding. IBM X-Force ID: 138212.

Affected configurations

Vulners

NVD

Node

ibmwebsphere_mqMatch7.0.1.1

ibmwebsphere_mqMatch7.0.1.2

ibmwebsphere_mqMatch7.0.1.3

ibmwebsphere_mqMatch7.0.1.4

ibmwebsphere_mqMatch7.0.1

ibmwebsphere_mqMatch7.0.1.5

ibmwebsphere_mqMatch7.0.1.6

ibmwebsphere_mqMatch7.0.1.8

ibmwebsphere_mqMatch7.0.1.7

ibmwebsphere_mqMatch7.0.1.9

ibmwebsphere_mqMatch7.0.1.10

ibmwebsphere_mqMatch7.0.1.11

ibmwebsphere_mqMatch7.0.1.12

ibmwebsphere_mqMatch7.0.1.13

ibmwebsphere_mqMatch7.0.1.14

VendorProductVersionCPE
ibmwebsphere_mq7.0.1.1cpe:2.3:a:ibm:websphere_mq:7.0.1.1:*:*:*:*:*:*:*
ibmwebsphere_mq7.0.1.2cpe:2.3:a:ibm:websphere_mq:7.0.1.2:*:*:*:*:*:*:*
ibmwebsphere_mq7.0.1.3cpe:2.3:a:ibm:websphere_mq:7.0.1.3:*:*:*:*:*:*:*
ibmwebsphere_mq7.0.1.4cpe:2.3:a:ibm:websphere_mq:7.0.1.4:*:*:*:*:*:*:*
ibmwebsphere_mq7.0.1cpe:2.3:a:ibm:websphere_mq:7.0.1:*:*:*:*:*:*:*
ibmwebsphere_mq7.0.1.5cpe:2.3:a:ibm:websphere_mq:7.0.1.5:*:*:*:*:*:*:*
ibmwebsphere_mq7.0.1.6cpe:2.3:a:ibm:websphere_mq:7.0.1.6:*:*:*:*:*:*:*
ibmwebsphere_mq7.0.1.8cpe:2.3:a:ibm:websphere_mq:7.0.1.8:*:*:*:*:*:*:*
ibmwebsphere_mq7.0.1.7cpe:2.3:a:ibm:websphere_mq:7.0.1.7:*:*:*:*:*:*:*
ibmwebsphere_mq7.0.1.9cpe:2.3:a:ibm:websphere_mq:7.0.1.9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	websphere_mq	7.0.1.1	cpe:2.3:a:ibm:websphere_mq:7.0.1.1:::::::*
ibm	websphere_mq	7.0.1.2	cpe:2.3:a:ibm:websphere_mq:7.0.1.2:::::::*
ibm	websphere_mq	7.0.1.3	cpe:2.3:a:ibm:websphere_mq:7.0.1.3:::::::*
ibm	websphere_mq	7.0.1.4	cpe:2.3:a:ibm:websphere_mq:7.0.1.4:::::::*
ibm	websphere_mq	7.0.1	cpe:2.3:a:ibm:websphere_mq:7.0.1:::::::*
ibm	websphere_mq	7.0.1.5	cpe:2.3:a:ibm:websphere_mq:7.0.1.5:::::::*
ibm	websphere_mq	7.0.1.6	cpe:2.3:a:ibm:websphere_mq:7.0.1.6:::::::*
ibm	websphere_mq	7.0.1.8	cpe:2.3:a:ibm:websphere_mq:7.0.1.8:::::::*
ibm	websphere_mq	7.0.1.7	cpe:2.3:a:ibm:websphere_mq:7.0.1.7:::::::*
ibm	websphere_mq	7.0.1.9	cpe:2.3:a:ibm:websphere_mq:7.0.1.9:::::::*

Rows per page:

1-10 of 151

CNA Affected

[
  {
    "product": "WebSphere MQ",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.0.1.1"
      },
      {
        "status": "affected",
        "version": "7.0.1.2"
      },
      {
        "status": "affected",
        "version": "7.0.1.3"
      },
      {
        "status": "affected",
        "version": "7.0.1.4"
      },
      {
        "status": "affected",
        "version": "7.0.1"
      },
      {
        "status": "affected",
        "version": "7.0.1.5"
      },
      {
        "status": "affected",
        "version": "7.0.1.6"
      },
      {
        "status": "affected",
        "version": "7.0.1.8"
      },
      {
        "status": "affected",
        "version": "7.0.1.7"
      },
      {
        "status": "affected",
        "version": "7.0.1.9"
      },
      {
        "status": "affected",
        "version": "7.0.1.10"
      },
      {
        "status": "affected",
        "version": "7.0.1.11"
      },
      {
        "status": "affected",
        "version": "7.0.1.12"
      },
      {
        "status": "affected",
        "version": "7.0.1.13"
      },
      {
        "status": "affected",
        "version": "7.0.1.14"
      }
    ]
  }
]

References

www.ibm.com/support/docview.wss?uid=swg22013022

www.securityfocus.com/bid/103698

exchange.xforce.ibmcloud.com/vulnerabilities/138212

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.1%

JSON

Related for CVE-2018-1388

nessus2 ibm13 prion1 nvd1 cvelist1 aix1