CVE-2018-1884

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-11-12 · updated 2026-06-17
Weakness: CWE-22

Description

IBM Case Manager 5.2.0.0, 5.2.0.4, 5.2.1.0, 5.2.1.7, 5.3.0.0, and 5.3.3.0 is vulnerable to a "zip slip" vulnerability which could allow a remote attacker to execute code using directory traversal techniques. IBM X-Force ID: 151970.

Affected products

IBM Case Manager: 5.2.0.0, 5.2.0.4, 5.2.1.0, 5.2.1.7, 5.3.0.0, 5.3.3.0

References

http://www.ibm.com/support/docview.wss?uid=ibm10737897
http://www.securityfocus.com/bid/105946
https://exchange.xforce.ibmcloud.com/vulnerabilities/151970
http://www.ibm.com/support/docview.wss?uid=ibm10737897
http://www.securityfocus.com/bid/105946
https://exchange.xforce.ibmcloud.com/vulnerabilities/151970

Get alerted when CVE-2018-1884 or the next vulnerability affects your stack