CVE-2017-1258

Опубликовано: 05 июл. 2017

Источник: nvd

CVSS3: 6.5

CVSS2: 6.4

EPSS Низкий

Описание

IBM Security Guardium 10.0 and 10.1 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM X-Force ID: 124685

Ссылки

http://www.ibm.com/support/docview.wss?uid=swg22004309
Vendor Advisory
http://www.securityfocus.com/bid/99377
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/124685
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22004309
Vendor Advisory
http://www.securityfocus.com/bid/99377
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/124685
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:security_guardium:10.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium:10.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium:10.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium:10.1.2:*:*:*:*:*:*:*

EPSS

Процентиль: 39%

0.00178

Низкий

6.5 Medium

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-36mw-gq75-9mwg