5.3
CVE-2017-1474
- EPSS 1.76%
- Veröffentlicht 06.06.2018 17:29:00
- Zuletzt bearbeitet 21.11.2024 03:21:55
- Quelle psirt@us.ibm.com
- CVE-Watchlists
- Unerledigt
LoginIBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 128606.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Security Access Manager Version >= 9.0.0 <= 9.0.3.1
Ibm ≫ Security Access Manager For Mobile Version >= 8.0.0 <= 8.0.1.6
Ibm ≫ Security Access Manager For Web Version >= 7.0.0 <= 7.0.0.32
Ibm ≫ Security Access Manager For Web Version >= 8.0.0 <= 8.0.1.6
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.76% | 0.751 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.3 | 3.9 | 1.4 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
| psirt@us.ibm.com | 5.3 | 3.9 | 1.4 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
http://www.ibm.com/support/docview.wss?uid=swg22012329
http://www.securityfocus.com/bid/104476
https://exchange.xforce.ibmcloud.com/vulnerabilities/128606