CVE-2017-1210

Опубликовано: 24 окт. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 could allow an unauthenticated attacker to inject data into log files made to look legitimate. IBM X-Force ID: 123850.

Ссылки

http://www.ibm.com/support/docview.wss?uid=swg22008009
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/123850
VDB Entry
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22008009
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/123850
VDB Entry
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:daeja_viewone:4.1.5:*:*:*:professional:*:*:*

cpe:2.3:a:ibm:daeja_viewone:4.1.5:*:*:*:standard:*:*:*

cpe:2.3:a:ibm:daeja_viewone:4.1.5:*:*:*:virtual:*:*:*

cpe:2.3:a:ibm:daeja_viewone:4.1.5.1:*:*:*:professional:*:*:*

cpe:2.3:a:ibm:daeja_viewone:4.1.5.1:*:*:*:standard:*:*:*

cpe:2.3:a:ibm:daeja_viewone:4.1.5.1:*:*:*:virtual:*:*:*

cpe:2.3:a:ibm:daeja_viewone:5.0.0:*:*:*:virtual:*:*:*

cpe:2.3:a:ibm:daeja_viewone:5.0.2:*:*:*:professional:*:*:*

cpe:2.3:a:ibm:daeja_viewone:5.0.2:*:*:*:standard:*:*:*

cpe:2.3:a:ibm:daeja_viewone:5.0.2:*:*:*:virtual:*:*:*

EPSS

Процентиль: 49%

0.00258

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-g9cp-6gcc-mw2r