5.3
CVE-2017-1474
- EPSS 0.19%
- Published 06.06.2018 17:29:00
- Last modified 21.11.2024 03:21:55
- Source psirt@us.ibm.com
- Teams watchlist Login
- Open Login
IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 128606.
Data is provided by the National Vulnerability Database (NVD)
Ibm ≫ Security Access Manager Version >= 9.0.0 <= 9.0.3.1
Ibm ≫ Security Access Manager For Mobile Version >= 8.0.0 <= 8.0.1.6
Ibm ≫ Security Access Manager For Web Version >= 7.0.0 <= 7.0.0.32
Ibm ≫ Security Access Manager For Web Version >= 8.0.0 <= 8.0.1.6
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.19% | 0.413 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 5.3 | 3.9 | 1.4 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
| psirt@us.ibm.com | 5.3 | 3.9 | 1.4 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.