VULNERABILITY INTELLIGENCE

CVE-2018-1843

CVSS score4.1 MEDIUM
EPSS probability0.32%
CISA KEVNot currently listed
Published2018-11-21
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

Description

The Identity and Access Management (IAM) services (IBM Cloud Private 3.1.0) do not use a secure channel, such as SSL, to exchange information only when accessed internally from within the cluster. It could be possible for an attacker with access to network traffic to sniff packets from the connection and uncover data. IBM X-Force ID: 150903

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references