CVE-2018-1409 IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on the system. By crafting a command line sent via the shared memory IPC, which could b...
HighCVSS 7.8
EPSS 0.37%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on the system. By crafting a command line sent via the shared memory IPC, which could be tricked into executing an executable chosen by the attacker. IBM X-Force ID: 138708.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm notes | = 8.5.1.5 | No fix listed |
| ibm notes | = 8.5.2.4 | No fix listed |
| ibm notes | = 8.5.3.6 | No fix listed |
| ibm notes | = 9.0 | No fix listed |
| ibm notes | = 9.0.1.9 | No fix listed |
| ibm client application access | = 1.0.0.1 | No fix listed |
| ibm client application access | = 1.0.1 | No fix listed |
| ibm client application access | = 1.0.1.2 | No fix listed |
References
- www.ibm.com vendor-advisory
- www.ibm.com vendor-advisory
- exchange.xforce.ibmcloud.com vdb-entry