Security Bulletin: IBM Event Streams is affected by gettext vulnerability CVE-2018-18751

Summary IBM Event Streams has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2018-18751 DESCRIPTION: GNU gettext is vulnerable to a denial of service, caused by a double free flaw in the defaultaddmessage function in read-catalog.c. By persuading a victim to open a...

CVE-2018-1833

CVE-2018-1833 affects IBM Event Streams 2018.3.0. A remote attacker with prior CLI access can submit an API request using a forged Host header to spoof the request. The impact is limited to header spoofing as described in the IBM/X-Force context; no exploitation details beyond header manipulation...

Cross site request forgery (csrf)

IBM Event Streams 2018.3.0 could allow a remote attacker to submit an API request with a fake Host request header. An attacker, who has already gained authorised access via the CLI, could exploit this vulnerability to spoof the request header. IBM X-Force ID: 150507...