Skip to content
OpenAdvisories
Medium · 6.7 CVE-2018-1928 EUVD-2018-12507GHSA-2r9r-8crm-q8p5

IBM StoredIQ 7.6.0 does not implement proper authorization of user roles due to which it was possible for a low privileged user to access t…

Published Nov 30, 2018 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM StoredIQ 7.6.0 does not implement proper authorization of user roles due to which it was possible for a low privileged user to access the application endpoints of high privileged users and also perform some state changing actions restricted to a high privileged user. IBM X-Force ID: 153119.

Affected products

VendorProductAffectedFixed
IBM StoredIQ 7.6.0 —

References