High severity · published Feb 19, 2018
CVE-2018-1409
IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on the system
7.8
CVSS
0.4%
EPSS
No
On KEV
Description
IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on the system. By crafting a command line sent via the shared memory IPC, which could be tricked into executing an executable chosen by the attacker. IBM X-Force ID: 138708.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CA
Client Application Access · Ibm
1.0.0.1; 1.0.1; 1.0.1.2 · source: NVD
NO
Notes · Ibm
8.5.1.5; 8.5.2.4; 8.5.3.6; 9.0; 9.0.1.9 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-1409
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-1409
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22010766
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22010767
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/138708
More from Client Application Access
7.8
CVE-2018-1411
IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on the system
7.8
CVE-2018-1410
IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on the system
7.8
CVE-2017-1714
IBM Notes and Domino NSD 8.5 and 9.0 could allow an authenticated local user without administrative privileges to gain System privilege
7.8
CVE-2017-1711
IBM iNotes 8.5 and 9.0 SUService can be misguided into running malicious code from a DLL masquerading as a windows DLL in the temp directory
5.9
CVE-2016-0270
IBM Domino 9.0.1 Fix Pack 3 Interim Fix 2 through 9.0.1 Fix Pack 5 Interim Fix 1, when using TLS and AES GCM, uses random nonce generation, which makes it easier for remote…