Sign-up

ID

VAR-201809-0198


CVE

CVE-2018-1773


TITLE

IBM Datacap Fastdoc Capture Authentication vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2018-009682

DESCRIPTION

IBM Datacap Fastdoc Capture 9.1.1, 9.1.3, and 9.1.4 could allow an authenticated user to bypass future authentication mechanisms once the initial login is completed. IBM X-Force ID: 148691. IBM Datacap Fastdoc Capture Contains an authentication vulnerability. Vendors have confirmed this vulnerability IBM X-Force ID: 148691 It is released as.Information may be tampered with. An attacker can exploit this issue to bypass authentication mechanism and perform unauthorized actions. This may lead to further attacks

Trust: 1.89

sources: NVD: CVE-2018-1773 // JVNDB: JVNDB-2018-009682 // BID: 105340

AFFECTED PRODUCTS

vendor:ibmmodel:datacapscope:eqversion:9.1.4

Trust: 1.6

vendor:ibmmodel:datacapscope:eqversion:9.1.1

Trust: 1.6

vendor:ibmmodel:datacapscope:eqversion:9.1.3

Trust: 1.6

vendor:ibmmodel:datacapscope:eqversion:fastdoc capture 9.1.1

Trust: 0.8

vendor:ibmmodel:datacapscope:eqversion:fastdoc capture 9.1.3

Trust: 0.8

vendor:ibmmodel:datacapscope:eqversion:fastdoc capture 9.1.4

Trust: 0.8

vendor:ibmmodel:datacap taskmaster capturescope:eqversion:9.1.4

Trust: 0.3

vendor:ibmmodel:datacap taskmaster capturescope:eqversion:9.1.3

Trust: 0.3

vendor:ibmmodel:datacap taskmaster capturescope:eqversion:9.1.1

Trust: 0.3

vendor:ibmmodel:datacap navigatorscope:eqversion:9.1.4

Trust: 0.3

vendor:ibmmodel:datacap navigatorscope:eqversion:9.1.3

Trust: 0.3

vendor:ibmmodel:datacap navigatorscope:eqversion:9.1.1

Trust: 0.3

vendor:ibmmodel:datacap fastdoc capturescope:eqversion:9.1.4

Trust: 0.3

vendor:ibmmodel:datacap fastdoc capturescope:eqversion:9.1.3

Trust: 0.3

vendor:ibmmodel:datacap fastdoc capturescope:eqversion:9.1.1

Trust: 0.3

vendor:ibmmodel:datacap taskmaster capture interim fixscope:neversion:9.1.41

Trust: 0.3

vendor:ibmmodel:datacap taskmaster capture interim fixscope:neversion:9.1.36

Trust: 0.3

vendor:ibmmodel:datacap taskmaster capture hotfixscope:neversion:9.1.11

Trust: 0.3

vendor:ibmmodel:datacap navigator interim fixscope:neversion:9.1.41

Trust: 0.3

vendor:ibmmodel:datacap navigator interim fixscope:neversion:9.1.36

Trust: 0.3

vendor:ibmmodel:datacap navigator hotfixscope:neversion:9.1.11

Trust: 0.3

vendor:ibmmodel:datacap fastdoc capture interim fixscope:neversion:9.1.41

Trust: 0.3

vendor:ibmmodel:datacap fastdoc capture interim fixscope:neversion:9.1.36

Trust: 0.3

vendor:ibmmodel:datacap fastdoc capture hotfixscope:neversion:9.1.11

Trust: 0.3

sources: BID: 105340 // JVNDB: JVNDB-2018-009682 // CNNVD: CNNVD-201809-634 // NVD: CVE-2018-1773

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2018-1773
value: MEDIUM

Trust: 1.0

psirt@us.ibm.com: CVE-2018-1773
value: MEDIUM

Trust: 1.0

NVD: CVE-2018-1773
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-201809-634
value: MEDIUM

Trust: 0.6

nvd@nist.gov: CVE-2018-1773
severity: MEDIUM
baseScore: 4.0
vectorString: AV:N/AC:L/AU:S/C:N/I:P/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: NONE
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: 8.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

nvd@nist.gov: CVE-2018-1773
baseSeverity: MEDIUM
baseScore: 4.3
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: LOW
availabilityImpact: NONE
exploitabilityScore: 2.8
impactScore: 1.4
version: 3.0

Trust: 2.8

sources: JVNDB: JVNDB-2018-009682 // CNNVD: CNNVD-201809-634 // NVD: CVE-2018-1773 // NVD: CVE-2018-1773

PROBLEMTYPE DATA

problemtype:CWE-287

Trust: 1.8

sources: JVNDB: JVNDB-2018-009682 // NVD: CVE-2018-1773

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201809-634

TYPE

authorization issue

Trust: 0.6

sources: CNNVD: CNNVD-201809-634

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2018-009682

PATCH
title:0729013url:https://www.ibm.com/support/docview.wss?uid=ibm10729013
Trust: 0.8
title:ibm-datacap-cve20181773-sec-bypass (148691)url:https://exchange.xforce.ibmcloud.com/vulnerabilities/148691
Trust: 0.8
title:IBM Datacap Fastdoc Capture Security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=84887
Trust: 0.6
sources:
            
            
            JVNDB: JVNDB-2018-009682 // 
            
            
            
            CNNVD: CNNVD-201809-634

EXTERNAL IDS
db:NVDid:CVE-2018-1773
Trust: 2.7
db:BIDid:105340
Trust: 1.9
db:JVNDBid:JVNDB-2018-009682
Trust: 0.8
db:CNNVDid:CNNVD-201809-634
Trust: 0.6
sources:
            
            
            BID: 105340 // 
            
            
            
            JVNDB: JVNDB-2018-009682 // 
            
            
            
            CNNVD: CNNVD-201809-634 // 
            
            
            
            NVD: CVE-2018-1773

REFERENCES
url:https://exchange.xforce.ibmcloud.com/vulnerabilities/148691
Trust: 1.6
url:http://www.securityfocus.com/bid/105340
Trust: 1.6
url:https://www.ibm.com/support/docview.wss?uid=ibm10729013
Trust: 1.6
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-1773
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2018-1773
Trust: 0.8
url:http://www.ibm.com
Trust: 0.3
url:https://www-01.ibm.com/support/docview.wss?uid=ibm10729013
Trust: 0.3
sources:
            
            
            BID: 105340 // 
            
            
            
            JVNDB: JVNDB-2018-009682 // 
            
            
            
            CNNVD: CNNVD-201809-634 // 
            
            
            
            NVD: CVE-2018-1773

CREDITS
The vendor reported this issue.
Trust: 0.3
sources:
            
            
            BID: 105340

SOURCES
db:BIDid:105340
db:JVNDBid:JVNDB-2018-009682
db:CNNVDid:CNNVD-201809-634
db:NVDid:CVE-2018-1773

LAST UPDATE DATE
2024-11-23T23:04:59.018000+00:00

SOURCES UPDATE DATE
db:BIDid:105340date:2018-09-10T00:00:00
db:JVNDBid:JVNDB-2018-009682date:2018-11-26T00:00:00
db:CNNVDid:CNNVD-201809-634date:2019-10-17T00:00:00
db:NVDid:CVE-2018-1773date:2024-11-21T04:00:20.560

SOURCES RELEASE DATE
db:BIDid:105340date:2018-09-10T00:00:00
db:JVNDBid:JVNDB-2018-009682date:2018-11-26T00:00:00
db:CNNVDid:CNNVD-201809-634date:2018-09-13T00:00:00
db:NVDid:CVE-2018-1773date:2018-09-12T14:29:01.140