7.5

CVE-2017-1267

IBM Security Guardium 10.0 and 10.1 processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code. IBM X-Force ID: 124742.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Security Guardium Version 9.0
Ibm ≫ Security Guardium Version 9.1
Ibm ≫ Security Guardium Version 9.5
Ibm ≫ Security Guardium Version 10.0
Ibm ≫ Security Guardium Version 10.0.1
Ibm ≫ Security Guardium Version 10.1
Ibm ≫ Security Guardium Version 10.1.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.63% 0.731
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.ibm.com/support/docview.wss?uid=swg22004424
Patch
Vendor Advisory
http://www.securityfocus.com/bid/99896
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038984
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/124742
Vendor Advisory
VDB Entry