CVE-2018-1928
IBM StoredIQ 7.6.0 does not implement proper authorization of user roles due to which it was possible for a low privileged user to access the application endpoints of high privi…
Published: 2018-11-30 · CVSS: 6.7 · CVSS 3.0
IBM StoredIQ 7.6.0 does not implement proper authorization of user roles due to which it was possible for a low privileged user to access the application endpoints of high privileged users and also perform some state changing actions restricted to a high privileged user. IBM X-Force ID: 153119.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7