CVE Vulnerabilities

CVE-2018-1773

Improper Authentication

Published: Sep 12, 2018 | Modified: Oct 09, 2019
CVSS 3.x
4.3
MEDIUM
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

IBM Datacap Fastdoc Capture 9.1.1, 9.1.3, and 9.1.4 could allow an authenticated user to bypass future authentication mechanisms once the initial login is completed. IBM X-Force ID: 148691.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Datacap Ibm 9.1.1 (including) 9.1.1 (including)
Datacap Ibm 9.1.3 (including) 9.1.3 (including)
Datacap Ibm 9.1.4 (including) 9.1.4 (including)

Potential Mitigations

References