4.3
CVE-2017-1602
- EPSS 0.17%
- Veröffentlicht 23.03.2018 19:29:00
- Zuletzt bearbeitet 21.11.2024 03:22:07
- Quelle psirt@us.ibm.com
- Teams Watchlist Login
- Unerledigt Login
IBM RSA DM (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to access settings that they should not be able to using a specially crafted URL. IBM X-Force ID: 132625.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Rational Collaborative Lifecycle Management Version >= 4.0.0 <= 6.0.5
Ibm ≫ Rational Quality Manager Version >= 4.0.0 <= 4.0.7
Ibm ≫ Rational Quality Manager Version >= 6.0.0 <= 6.0.5
Ibm ≫ Rational Quality Manager Version5.0.0
Ibm ≫ Rational Quality Manager Version5.0.1
Ibm ≫ Rational Quality Manager Version5.0.2
Ibm ≫ Rational Team Concert Version >= 4.0.0 <= 4.0.7
Ibm ≫ Rational Team Concert Version >= 6.0.0 <= 6.0.5
Ibm ≫ Rational Team Concert Version5.0.0
Ibm ≫ Rational Team Concert Version5.0.1
Ibm ≫ Rational Team Concert Version5.0.2
Ibm ≫ Rational Doors Next Generation Version >= 4.0.1 <= 4.0.7
Ibm ≫ Rational Doors Next Generation Version >= 6.0.0 <= 6.0.5
Ibm ≫ Rational Doors Next Generation Version5.0.0
Ibm ≫ Rational Doors Next Generation Version5.0.1
Ibm ≫ Rational Doors Next Generation Version5.0.2
Ibm ≫ Rational Engineering Lifecycle Manager Version >= 4.0.3 <= 4.0.7
Ibm ≫ Rational Engineering Lifecycle Manager Version >= 6.0.0 <= 6.0.5
Ibm ≫ Rational Engineering Lifecycle Manager Version5.0.0
Ibm ≫ Rational Engineering Lifecycle Manager Version5.0.1
Ibm ≫ Rational Engineering Lifecycle Manager Version5.0.2
Ibm ≫ Rational Rhapsody Design Manager Version >= 4.0 <= 4.0.7
Ibm ≫ Rational Rhapsody Design Manager Version >= 6.0.0 <= 6.0.5
Ibm ≫ Rational Rhapsody Design Manager Version5.0.0
Ibm ≫ Rational Rhapsody Design Manager Version5.0.1
Ibm ≫ Rational Rhapsody Design Manager Version5.0.2
Ibm ≫ Rational Software Architect Design Manager Version >= 4.0.0 <= 4.0.7
Ibm ≫ Rational Software Architect Design Manager Version5.0.0
Ibm ≫ Rational Software Architect Design Manager Version5.0.1
Ibm ≫ Rational Software Architect Design Manager Version5.0.2
Ibm ≫ Rational Software Architect Design Manager Version6.0.0
Ibm ≫ Rational Software Architect Design Manager Version6.0.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
Typ | Quelle | Score | Percentile |
---|---|---|---|
EPSS | FIRST.org | 0.17% | 0.381 |
Quelle | Base Score | Exploit Score | Impact Score | Vector String |
---|---|---|---|---|
nvd@nist.gov | 4.3 | 2.8 | 1.4 |
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
|
nvd@nist.gov | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:N/I:P/A:N
|
psirt@us.ibm.com | 4.3 | 2.8 | 1.4 |
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
|
CWE-552 Files or Directories Accessible to External Parties
The product makes files or directories accessible to unauthorized actors, even though they should not be.