Security Bulletin: Datacap Taskmaster Capture, Datacap Fastdoc Capture and Datacap Navigator is affected by vulnerability due to unexpected authentication behavior

Summary

Datacap Taskmaster Capture, Datacap Fastdoc Capture and Datacap Navigator has addressed the vulnerability which could allow an authenticated user to bypass future authentication mechanisms once the initial login is completed.

Vulnerability Details

CVEID: CVE-2018-1773 DESCRIPTION: IBM Datacap Fastdoc Capture could allow an authenticated user to bypass future authentication mechanisms once the initial login is completed.
CVSS Base Score: 4.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/148691&gt; for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)

Affected Products and Versions

IBM Datacap (Datacap Taskmaster Capture, Datacap Fastdoc Capture, Datacap Navigator) 9.1.1, 9.1.3, 9.1.4

Remediation/Fixes

Product

| VRM |Remediation
—|—|—
IBM Datacap | 9.1.1 | Use IBM Datacap 9.1.1 Hotfix 1
IBM Datacap | 9.1.3 | Use IBM Datacap 9.1.3 Interim Fix 6
IBM Datacap | 9.1.4 | Use IBM Datacap 9.1.4 Interim Fix 1

Workarounds and Mitigations

None