CVE-2017-1731

EPSS 1.75%
Veröffentlicht 30.01.2018 18:29:00
Zuletzt bearbeitet 21.11.2024 03:22:16
Quelle psirt@us.ibm.com
CVE-Watchlists
Login
Unerledigt
Login

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected security when using the Administrative Console. An authenticated remote attacker could exploit this vulnerability to possibly gain elevated privileges.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Websphere Application Server Version >= 7.0.0.0 <= 7.0.0.43

Ibm ≫ Websphere Application Server Version >= 8.0.0.0 <= 8.0.0.14

Ibm ≫ Websphere Application Server Version >= 8.5.0.0 <= 8.5.5.13

Ibm ≫ Websphere Application Server Version >= 9.0.0.0 <= 9.0.0.6

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.75%	0.819

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	8.8	2.8	5.9	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	6.5	8	6.4	AV:N/AC:L/Au:S/C:P/I:P/A:P

http://www-01.ibm.com/support/docview.wss?uid=swg22012345&myns=swgws&mynp=OCSSEQTP&mync=R&cm_sp=swgws-_-OCSSEQTP-_-R

Vendor Advisory

http://www.securityfocus.com/bid/102911

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1040356

Third Party Advisory

VDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/134912

Vendor Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2017-1731

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-1731

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-1731

EUVD