VULNERABILITY INTELLIGENCE

CVE-2018-1668

CVSS score5.3 MEDIUM

EPSS probability1.40%

CISA KEVNot currently listed

Published2019-01-29

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

IBM DataPower Gateway 7.5.0.0 through 7.5.0.19, 7.5.1.0 through 7.5.1.18, 7.5.2.0 through 7.5.2.18, and 7.6.0.0 through 7.6.0.11 appliances allows "null" logins which could give read access to IPMI data to obtain sensitive information. IBM X-Force ID: 144894.

Weakness classification

CWE-287: Improper Authentication

Primary references

psirt@us.ibm.com — VDB Entry, Vendor Advisory
psirt@us.ibm.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — VDB Entry, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory