VYPR
← All advisories
High severity7.8NVD Advisory· Published Feb 19, 2018· Updated Jun 17, 2026

CVE-2018-1410

CVE-2018-1410

Description

IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on the system. By crafting a command line sent via the shared memory IPC, which could be tricked into executing an executable chosen by the attacker. IBM X-Force ID: 138709.

Affected products

12
  • IBM/Notesllm-create7 versions
    (expand)+ 6 more
    • (no CPE)
    • cpe:2.3:a:ibm:notes:8.5.1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:notes:8.5.2.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:notes:8.5.3.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:notes:9.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:notes:9.0.1.9:*:*:*:*:*:*:*
    • (no CPE)range: 8.5.3.6
  • IBM/Client Access4 versions
    cpe:2.3:a:ibm:client_application_access:1.0.0.1:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:ibm:client_application_access:1.0.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:client_application_access:1.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:client_application_access:1.0.1.2:*:*:*:*:*:*:*
    • (no CPE)range: 1.0.0.1
  • IBM/IBM Notes Diagnosticsllm-fuzzy

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.