Security Bulletin: Content Collector for Email is affected by spoofing attack vulnerability in WAS Logout Form

Summary

Content Collector for Email has addressed the following vulnerability. IBM WebSphere Application Server installations using Form Login could allow a remote attacker to conduct spoofing attacks.

Vulnerability Details

CVEID: CVE-2018-1695 DESCRIPTION: IBM WebSphere Application Server installations using Form Login could allow a remote attacker to conducts spoofing attacks.
CVSS Base Score: 7.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/145769&gt; for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

Affected Products and Versions

Content Collector for Email v4.0.1

Remediation/Fixes

Product

| VRM | Remediation
—|—|—
Content Collector for Email | 4.0.1 | Use_ _Content Collector for Email 4.0.1.8 Interim Fix 008

Workarounds and Mitigations

NA