IBM Security Bulletin: IBM Connections Security Refresh (CVE-2018-1896)

Dec 6, 2018 9:01 am EST

Categorized: Medium Severity

Share this post:

IBM Connections contains possible host header injection attack vulnerability, see details below for remediation information.

CVE(s): CVE-2018-1896

Affected product(s) and affected version(s):

The following versions of IBM Connections are impacted:

IBM Connections 6.0
IBM Connections 5.5
IBM Connections 5.0

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10742567
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/152456

from IBM Product Security Incident Response Team https://ift.tt/2Gfmcor