CVE-2018-1437 IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to multiple untrusted search path. A local attacker could exploit this vulnerability t...
HighCVSS 7.8
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to multiple untrusted search path. A local attacker could exploit this vulnerability to DLL hijacking to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 139565.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm notes | = 8.5 | No fix listed |
| ibm notes | = 8.5.0.2 | No fix listed |
| ibm notes | = 8.5.1 | No fix listed |
| ibm notes | = 8.5.1.5 | No fix listed |
| ibm notes | = 8.5.2 | No fix listed |
| ibm notes | = 8.5.2.4 | No fix listed |
| ibm notes | = 8.5.3 | No fix listed |
| ibm notes | = 8.5.3.6 | No fix listed |
| ibm notes | = 9.0 | No fix listed |
| ibm notes | = 9.0.1 | No fix listed |
| ibm notes | = 9.0.1.9 | No fix listed |
References
- www.ibm.com patch vendor-advisory
- 103401 third-party-advisory vdb-entry
- 1040563 third-party-advisory vdb-entry
- ibm-notes-cve20181437-code-exec(139565) vdb-entry vendor-advisory