CVE-2017-1308

Опубликовано: 13 июл. 2017

Источник: nvd

CVSS3: 6.5

CVSS2: 4

EPSS Низкий

Описание

IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0 could allow an authenticated attacker to download files they should not have access to due to improper access controls. IBM X-Force ID: 125462.

Ссылки

http://www.ibm.com/support/docview.wss?uid=swg22003806
Patch
Vendor Advisory
http://www.securityfocus.com/bid/99549
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/125462
VDB Entry
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22003806
Patch
Vendor Advisory
http://www.securityfocus.com/bid/99549
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/125462
VDB Entry
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:daeja_viewone:4.1.5:*:*:*:professional:*:*:*

cpe:2.3:a:ibm:daeja_viewone:4.1.5:*:*:*:standard:*:*:*

cpe:2.3:a:ibm:daeja_viewone:4.1.5:*:*:*:virtual:*:*:*

cpe:2.3:a:ibm:daeja_viewone:4.1.5.1:*:*:*:professional:*:*:*

cpe:2.3:a:ibm:daeja_viewone:4.1.5.1:*:*:*:standard:*:*:*

cpe:2.3:a:ibm:daeja_viewone:4.1.5.1:*:*:*:virtual:*:*:*

cpe:2.3:a:ibm:daeja_viewone:5.0:*:*:*:virtual:*:*:*

EPSS

Процентиль: 52%

0.00285

Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-552

Связанные уязвимости

GHSA-cwx6-6644-ww5x