Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBM3B9EA29D7E2C9A6849413F5153892AAD86531FF7E7D7813EAA947F457B70D6E9
HistoryNov 10, 2020 - 10:16 a.m.

Security Bulletin: Vulnerability in BIND affects IBM Integrated Analytics System

2020-11-1010:16:40
www.ibm.com
8

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

JSON

Summary

RedHat provided BIND package is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable CVE.

Vulnerability Details

CVEID:CVE-2018-5741
**DESCRIPTION:**ISC BIND could allow a remote authenticated attacker to bypass security restrictions, caused by an error in the documentation of the ‘update-policy’ feature for the ‘krb5-subdomain’ and ‘ms-subdomain’ update policies. An attacker could exploit this vulnerability to modify records in the zone at or below the name specified in the name field.
CVSS Base score: 6.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/150171 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)

Affected Products and Versions

Affected Product(s) Version(s)
IBM Integrated Analytics System 1.0.0-1.0.23.0

Remediation/Fixes

Update to the following IBM Integrated Analytics System release :

Product VRMF Remediation / First Fix
IBM Integrated Analytics System 1.0.24.0 Link to Fix Central

Workarounds and Mitigations

None

CPENameOperatorVersion
ibm integrated analytics systemeqany

Related

alpinelinux 1
amazon 2
f5 1
ibm 3
cloudlinux 1
nessus 27
veracode 1
cve 1
debiancve 1
osv 1
redhatcve 1
ubuntucve 1
oraclelinux 2
prion 1
fedora 3
redhat 1
cisa 1
centos 1
openvas 7
gentoo 1
rosalinux 1
suse 2
alpinelinux
alpinelinux
CVE-2018-5741
2019-01-16 20:29:00
amazon
amazon
Medium: bind
2019-04-04 21:42:00
Medium: bind
2019-04-04 19:13:00
f5
f5
K04713734 : BIND vulnerability CVE-2018-5741
2018-10-15 00:00:00
ibm
ibm
Security Bulletin: IBM i is affected by networking BIND vulnerability CVE-2018-5741
2019-12-18 14:26:38
Security Bulletin: A vulnerability in ISC BIND affects IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data (CVE-2018-5741)
2023-01-12 21:59:00
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues
2024-03-01 18:15:09
cloudlinux
cloudlinux
Fixed CVE-2018-5741 in bind
2022-07-11 17:39:56
nessus
nessus
Scientific Linux Security Update : bind on SL7.x x86_64 (20190806)
2019-08-27 00:00:00
Fedora 29 : 32:bind (2018-a54e46032f)
2019-01-03 00:00:00
NewStart CGSL CORE 5.05 / MAIN 5.05 : bind Vulnerability (NS-SA-2019-0232)
2019-12-31 00:00:00
veracode
veracode
Authorization Bypass
2019-08-08 00:07:41
cve
cve
CVE-2018-5741
2019-01-16 20:29:00
debiancve
debiancve
CVE-2018-5741
2019-01-16 20:29:00
osv
osv
CVE-2018-5741
2019-01-16 20:29:01
redhatcve
redhatcve
CVE-2018-5741
2020-04-02 08:32:24
ubuntucve
ubuntucve
CVE-2018-5741
2019-01-16 00:00:00
oraclelinux
oraclelinux
bind security update
2022-02-03 00:00:00
bind security, bug fix, and enhancement update
2019-08-13 00:00:00
prion
prion
Design/Logic Flaw
2019-01-16 20:29:00
fedora
fedora
[SECURITY] Fedora 29 Update: bind-9.11.4-10.P2.fc29
2018-10-02 19:36:09
[SECURITY] Fedora 28 Update: bind-9.11.4-10.P2.fc28
2018-10-04 20:33:54
[SECURITY] Fedora 27 Update: bind-9.11.4-3.P2.fc27
2018-10-14 23:30:38
redhat
redhat
(RHSA-2019:2057) Moderate: bind security, bug fix, and enhancement update
2019-08-06 07:56:21
cisa
cisa
ISC Releases Security Advisory for BIND
2018-09-19 00:00:00
centos
centos
bind security update
2019-08-30 02:35:20
openvas
openvas
Fedora Update for bind FEDORA-2018-f22b937f52
2018-10-05 00:00:00
Fedora Update for bind FEDORA-2018-54d84b0b0c
2018-10-15 00:00:00
Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2019-2453)
2020-01-23 00:00:00
gentoo
gentoo
BIND: Multiple vulnerabilities
2019-03-14 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1803
2021-07-02 16:31:31
suse
suse
Security update for bind (moderate)
2020-10-20 00:00:00
Security update for bind (moderate)
2020-10-19 00:00:00

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

JSON
Related for 3B9EA29D7E2C9A6849413F5153892AAD86531FF7E7D7813EAA947F457B70D6E9
alpinelinux1amazon2f51ibm3cloudlinux1nessus27veracode1cve1debiancve1osv1redhatcve1ubuntucve1oraclelinux2prion1fedora3redhat1cisa1centos1openvas7gentoo1rosalinux1suse2