Security Bulletin: IBM InfoSphere Master Data Management - Collaborative Edition could allow an authenticated user with CA level access to change change their ca-id to another users and read sensitive information.

Summary

IBM InfoSphere Master Data Management - Collaborative Edition could allow an authenticated user with CA level access to change change their ca-id to another users and read sensitive information.

Vulnerability Details

CVEID: CVE-2018-1380 DESCRIPTION: IBM InfoSphere Master Data Management - Collaborative Edition could allow an authenticated user with CA level access to change change their ca-id to another users and read sensitive information.
CVSS Base Score: 2.7
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/138077&gt; for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)

Affected Products and Versions

Affected IBM InfoSphere Master Data Management - Collaborative Edition

|

Affected Versions

—|—
IBM InfoSphere Master Data Management - Collaborative Edition | 11.4
IBM InfoSphere Master Data Management - Collaborative Edition | 11.5
IBM InfoSphere Master Data Management - Collaborative Edition | 11.6

Remediation/Fixes

The recommended solution is to apply the fix as soon as practical. Please see below for information on the fix available.

Workarounds and Mitigations

None