CVE-2018-1000625

概要

参考情報

• exchange.xforce.ibmcloud.com/vulnerabilities/147302 · Third Party Advisory

v2i hub のその他の脆弱性

• CVE-2018-1000631緊急 9.8Battelle V2I Hub 3.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements to the tmx/TmxCtl/src/lib…
• CVE-2018-1000630高 7.2Battelle V2I Hub 2.5.1 is vulnerable to SQL injection. A remote authenticated attacker could send specially-crafted SQL statements to /api/P…
• CVE-2018-1000629中 6.1Battelle V2I Hub 2.5.1 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by api/SystemConfigAction…
• CVE-2018-1000628緊急 9.8Battelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions, caused by the direct checking of the API key against a…
• CVE-2018-1000627緊急 9.8Battelle V2I Hub 2.5.1 could allow a remote attacker to obtain sensitive information, caused by the failure to restrict access to the API ke…