{"id":"CVE-2018-1668","state":"PUBLISHED","title":"IBM DataPower Gateway 7.5.0.0 through 7.5.0.19, 7.5.1.0 through 7.5.1.18, 7.5.2.0 through 7.5.2.18, and 7.6.0.0 through 7.6.0.11 appliances allows \"null\" logins which could give re","description":"IBM DataPower Gateway 7.5.0.0 through 7.5.0.19, 7.5.1.0 through 7.5.1.18, 7.5.2.0 through 7.5.2.18, and 7.6.0.0 through 7.6.0.11 appliances allows \"null\" logins which could give read access to IPMI data to obtain sensitive information. IBM X-Force ID: 144894.","publishedAt":"2019-01-29T16:00:00.000Z","updatedAt":"2024-09-17T03:23:57.104Z","severity":{"score":5.3,"label":"Medium","version":"3.0","vector":"CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O","source":"ibm"},"assigner":"ibm","products":["IBM DataPower Gateway"],"affected":[{"vendor":"IBM","product":"DataPower Gateway","versions":[{"version":"7.6.0.0","status":"affected"},{"version":"7.5.2.0","status":"affected"},{"version":"7.5.1.0","status":"affected"},{"version":"7.5.0.0","status":"affected"},{"version":"7.5.0.19","status":"affected"},{"version":"7.5.1.18","status":"affected"},{"version":"7.5.2.18","status":"affected"},{"version":"7.6.0.11","status":"affected"}]}],"references":["https://exchange.xforce.ibmcloud.com/vulnerabilities/144894","https://www.ibm.com/support/docview.wss?uid=ibm10794735"],"weaknesses":[],"ingestedAt":"2026-10-29T19:44:36.861Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2018/1xxx/CVE-2018-1668.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2018-1668","state":"PUBLISHED","datePublished":"2019-01-29T16:00:00.000Z","dateUpdated":"2024-09-17T03:23:57.104Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2017-12-13T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"IBM DataPower Gateway 7.5.0.0 through 7.5.0.19, 7.5.1.0 through 7.5.1.18, 7.5.2.0 through 7.5.2.18, and 7.6.0.0 through 7.6.0.11 appliances allows \"null\" logins which could give read access to IPMI data to obtain sensitive information. IBM X-Force ID: 144894."}],"affected":[{"vendor":"IBM","product":"DataPower Gateway","versions":[{"version":"7.6.0.0","status":"affected"},{"version":"7.5.2.0","status":"affected"},{"version":"7.5.1.0","status":"affected"},{"version":"7.5.0.0","status":"affected"},{"version":"7.5.0.19","status":"affected"},{"version":"7.5.1.18","status":"affected"},{"version":"7.5.2.18","status":"affected"},{"version":"7.6.0.11","status":"affected"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/144894","name":"ibm-websphere-cve20181668-info-disc(144894)","tags":["vdb-entry","x_refsource_XF"]},{"url":"https://www.ibm.com/support/docview.wss?uid=ibm10794735","tags":["x_refsource_CONFIRM"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","exploitCodeMaturity":"UNPROVEN","integrityImpact":"NONE","privilegesRequired":"NONE","remediationLevel":"OFFICIAL_FIX","reportConfidence":"CONFIRMED","scope":"UNCHANGED","temporalScore":4.6,"temporalSeverity":"MEDIUM","userInteraction":"NONE","vectorString":"CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O","version":"3.0"}}],"problemTypes":[{"descriptions":[{"description":"Obtain Information","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"ibm","dateUpdated":"2019-01-29T15:57:01.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522"},"datePublic":"2019-01-11T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","DATE_PUBLIC":"2019-01-11T00:00:00","ID":"CVE-2018-1668","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"DataPower Gateway","version":{"version_data":[{"version_value":"7.6.0.0"},{"version_value":"7.5.2.0"},{"version_value":"7.5.1.0"},{"version_value":"7.5.0.0"},{"version_value":"7.5.0.19"},{"version_value":"7.5.1.18"},{"version_value":"7.5.2.18"},{"version_value":"7.6.0.11"}]}}]},"vendor_name":"IBM"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"IBM DataPower Gateway 7.5.0.0 through 7.5.0.19, 7.5.1.0 through 7.5.1.18, 7.5.2.0 through 7.5.2.18, and 7.6.0.0 through 7.6.0.11 appliances allows \"null\" logins which could give read access to IPMI data to obtain sensitive information. IBM X-Force ID: 144894."}]},"impact":{"cvssv3":{"BM":{"A":"N","AC":"L","AV":"N","C":"L","I":"N","PR":"N","S":"U","UI":"N"},"TM":{"E":"U","RC":"C","RL":"O"}}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Obtain Information"}]}]},"references":{"reference_data":[{"name":"ibm-websphere-cve20181668-info-disc(144894)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/144894"},{"name":"https://www.ibm.com/support/docview.wss?uid=ibm10794735","refsource":"CONFIRM","url":"https://www.ibm.com/support/docview.wss?uid=ibm10794735"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/144894","name":"ibm-websphere-cve20181668-info-disc(144894)","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://www.ibm.com/support/docview.wss?uid=ibm10794735","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T04:07:44.335Z"}}]}}}