CVE:CVE-2018-1387
CNNVD:CNNVD-201803-233
IBM Cloud Application Performance Management Base Private等都是美国IBM公司的产品。IBM Cloud Application Performance Management Base Private是一套用于管理云应用性能的解决方案。Cloud APM Data Collector是一款数据收集器。
多款IBM产品中存在信息泄露漏洞。远程攻击者可利用该漏洞获取敏感的个人数据。以下产品和版本受到影响：IBM Cloud Application Performance Management Base Private 8.1.4版本，Cloud Application Performance Management Advanced Private 8.1.4版本，Cloud Application Performance Management 8.1.4版本；Cloud APM Data Collector 7.4版本，7.3版本；Monitoring 8.1.3版本，8.1.4版本。
solution:Upgrade ibm application_performance_management to a higher version than 8.1.4.0,and avoid the version 8.1.4.0; Upgrade ibm cloud_apm_data_collector to a higher version than 7.3,7.4,and avoid the version 7.3,7.4; Upgrade ibm monitoring to a higher version than 8.1.3.0,8.1.4.0,and avoid the version 8.1.3.0,8.1.4.0