CVE-2018-1000627

9.8 criticalEPSS 2.3%

Critical (9.8) in battelle v2i hub. EPSS 2.3% chance of exploitation in the next 30 days.

Battelle V2I Hub 2.5.1 could allow a remote attacker to obtain sensitive information, caused by the failure to restrict access to the API key file. An attacker could exploit this vulnerability to obtain the current API key to gain unauthorized access to the system.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
CWE: CWE-522
Published: 2018-12-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

battelle:v2i_hub

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/147304
https://exchange.xforce.ibmcloud.com/vulnerabilities/147304

Check your stack JSON