2.5

CVE-2017-1211

IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 could disclose sensitive information to a local user when logging is enabled. IBM X-Force ID: 123851.

Data is provided by the National Vulnerability Database (NVD)
IbmDaeja Viewone Version4.1.5 SwEditionprofessional
IbmDaeja Viewone Version4.1.5 SwEditionstandard
IbmDaeja Viewone Version4.1.5 SwEditionvirtual
IbmDaeja Viewone Version4.1.5.1 SwEditionprofessional
IbmDaeja Viewone Version4.1.5.1 SwEditionstandard
IbmDaeja Viewone Version4.1.5.1 SwEditionvirtual
IbmDaeja Viewone Version5.0.0 SwEditionvirtual
IbmDaeja Viewone Version5.0.2 SwEditionprofessional
IbmDaeja Viewone Version5.0.2 SwEditionstandard
IbmDaeja Viewone Version5.0.2 SwEditionvirtual
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.05% 0.105
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 2.5 1 1.4
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
nvd@nist.gov 1.9 3.4 2.9
AV:L/AC:M/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.