Security Bulletin: External Service invocation in IBM Business Space affects IBM Business Monitor (CVE-2018-1885)

Summary A vulnerability in IBM Business Space can allow an attacker to cause an external service invocation. Vulnerability Details CVEID: CVE-2018-1885 DESCRIPTION: IBM Business Space could allow an unauthenticated attacker to obtain sensitve information using a specially cracted HTTP request. CV...

CVE-2018-1885

The CVE-2018-1885 issue affects IBM software in the IBM Business Automation Workflow family (V18.0.0.0–18.0.0.2) and related BPM components, where an unauthenticated attacker could obtain sensitive information via a specially crafted HTTP request. The underlying vulnerability relates to an Extern...