CVE-2017-1480

Опубликовано: 06 июн. 2018

Источник: nvd

CVSS3: 4.3

CVSS2: 4

EPSS Низкий

Описание

IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 stores potentially sensitive information in log files that could be read by a remote user. IBM X-Force ID: 128617.

Ссылки

http://www.ibm.com/support/docview.wss?uid=swg22012309
Patch
Vendor Advisory
http://www.securityfocus.com/bid/104471
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/128617
VDB Entry
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22012309
Patch
Vendor Advisory
http://www.securityfocus.com/bid/104471
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/128617
VDB Entry
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ibm:security_access_manager:*:*:*:*:*:*:*:*

Версия от 9.0.0 (включая) до 9.0.3.1 (включая)

Конфигурация 2

cpe:2.3:a:ibm:security_access_manager_for_web:*:*:*:*:*:*:*:*

Версия от 8.0.0 (включая) до 8.0.1.6 (включая)

Конфигурация 3

cpe:2.3:a:ibm:security_access_manager_for_mobile:*:*:*:*:*:*:*:*

Версия от 8.0.0 (включая) до 8.0.1.6 (включая)

EPSS

Процентиль: 33%

0.00128

Низкий

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-532

Связанные уязвимости

GHSA-hq5f-r2v7-qp3x