Security Bulletin: IBM Security Guardium Big Data Intelligence (SonarG) is affected by an Incorrect Permission Assignment for Critical Resource vulnerability

Summary

IBM Security Guardium Big Data Intelligence (SonarG) has addressed the following vulnerability.

Vulnerability Details

CVEID: CVE-2018-1370
DESCRIPTION: IBM Security Guardium Big Data Intelligence (SonarG) specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
CVSS Base Score: 4.2
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/137769&gt; for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N)

Affected Products and Versions

Affected IBM Security Guardium Big Data Intelligence (SonarG)

|

Affected Versions

—|—
IBM Security Guardium Big Data Intelligence (SonarG)| 3.1

Remediation/Fixes

Product

|

VRMF

|

Remediation / First Fix

—|—|—
IBM Security Guardium Big Data Intelligence (SonarG)| 3.1| An updated version of the product can be found on IBM’s Passport Advantage site here: <https://www-01.ibm.com/software/passportadvantage/pacustomers.html&gt;

Workarounds and Mitigations

None