CVE-2017-1495

Опубликовано: 02 авг. 2017

Источник: nvd

CVSS3: 4.9

CVSS2: 4

EPSS Низкий

Описание

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a privileged user to cause a memory dump that could contain highly sensitive information including access credentials. IBM X-Force ID: 128693.

Ссылки

http://www.ibm.com/support/docview.wss?uid=swg22006068
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/128693
VDB Entry
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22006068
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/128693
VDB Entry
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:infosphere_information_server:9.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_information_server:11.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_information_server:11.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_information_server:11.5:*:*:*:*:cloud:*:*

EPSS

Процентиль: 49%

0.00258

Низкий

4.9 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-7w2h-52xv-3984