VYPR
← All advisories
High severity7.8NVD Advisory· Published Feb 19, 2018· Updated Jun 17, 2026

CVE-2018-1409

CVE-2018-1409

Description

IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on the system. By crafting a command line sent via the shared memory IPC, which could be tricked into executing an executable chosen by the attacker. IBM X-Force ID: 138708.

Affected products

11
  • IBM/Notescpe-rescue6 versions
    8.5.3.6+ 5 more
    • (no CPE)range: 8.5.3.6
    • cpe:2.3:a:ibm:notes:8.5.1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:notes:8.5.2.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:notes:8.5.3.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:notes:9.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:notes:9.0.1.9:*:*:*:*:*:*:*
  • IBM/IBM Notes Diagnosticsllm-fuzzy
  • IBM/Client Accesscpe-rescue4 versions
    1.0.0.1+ 3 more
    • (no CPE)range: 1.0.0.1
    • cpe:2.3:a:ibm:client_application_access:1.0.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:client_application_access:1.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:client_application_access:1.0.1.2:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.