Security Advisory

CVE-2018-1928

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-11-30 15:00:00
Last updated 2024-09-16 22:40:33
Assigner ibm
CVSS score 6.7
State PUBLISHED

Description

IBM StoredIQ 7.6.0 does not implement proper authorization of user roles due to which it was possible for a low privileged user to access the application endpoints of high privileged users and also perform some state changing actions restricted to a high privileged user. IBM X-Force ID: 153119.