CVE-2018-1388

🗓️ 07 Feb 2018 17:00:00Reported by ibmType

GSKit V7 discloses side channel info via PKCS#1 padding discrepancies

Reporter	Title	Published	Views	Family All 22
IBM Security Bulletins	Security Bulletin: WebSphere DataPower Appliances is affected by multiple issues	11 Sep 201813:21	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in GSKit affect IBM Tivoli Directory Server and IBM Security Directory Server for AIX	2 Jan 201914:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect the GSKit component of IBM Tivoli Monitoring shipped with IBM Operations Analytics - Log Analysis	26 Dec 201807:50	–	ibm
IBM Security Bulletins	Security Bulletin: Information disclosure in IBM HTTP Server (CVE-2018-1388)	15 Jun 201807:08	–	ibm
IBM Security Bulletins	WebSphere Application Server and IBM HTTP Server Security Bulletin List	13 Jul 202218:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is affected by GSKIT vulnerability CVE-2018-1388	18 Dec 201914:26	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM HTTP Server shipped with IBM Rational ClearQuest (CVE-2018-1388)	4 Feb 202016:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Directory Server is affected by a vulnerability in GSKit	12 Dec 201815:35	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere MQ is vulnerable to disclosing side channel information via discrepencies between valid and invalid PKCS#1 padding. ROBOT. (CVE-2018-1388)	15 Jun 201807:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect the GSKit component of IBM Tivoli Monitoring	17 Jun 201815:50	–	ibm

[
  {
    "product": "WebSphere MQ",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.0.1.1"
      },
      {
        "status": "affected",
        "version": "7.0.1.2"
      },
      {
        "status": "affected",
        "version": "7.0.1.3"
      },
      {
        "status": "affected",
        "version": "7.0.1.4"
      },
      {
        "status": "affected",
        "version": "7.0.1"
      },
      {
        "status": "affected",
        "version": "7.0.1.5"
      },
      {
        "status": "affected",
        "version": "7.0.1.6"
      },
      {
        "status": "affected",
        "version": "7.0.1.8"
      },
      {
        "status": "affected",
        "version": "7.0.1.7"
      },
      {
        "status": "affected",
        "version": "7.0.1.9"
      },
      {
        "status": "affected",
        "version": "7.0.1.10"
      },
      {
        "status": "affected",
        "version": "7.0.1.11"
      },
      {
        "status": "affected",
        "version": "7.0.1.12"
      },
      {
        "status": "affected",
        "version": "7.0.1.13"
      },
      {
        "status": "affected",
        "version": "7.0.1.14"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/103698
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/138212
ibm	www.ibm.com/support/docview.wss

20 Dec 2018 10:57Current

5.9Medium risk

Vulners AI Score5.9

EPSS0.00312