CVE-2017-1694

Опубликовано: 20 дек. 2017

Источник: nvd

CVSS3: 8.1

CVSS2: 4.3

EPSS Низкий

Описание

IBM Integration Bus 9.0 and 10.0 transmits user credentials in plain in clear text which can be read by an attacker using man in the middle techniques. IBM X-Force ID: 134165.

Ссылки

http://www.ibm.com/support/docview.wss?uid=swg22011695
Vendor Advisory
http://www.securityfocus.com/bid/102215
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/134165
VDB Entry
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22011695
Vendor Advisory
http://www.securityfocus.com/bid/102215
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/134165
VDB Entry
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:integration_bus:9.0.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:integration_bus:9.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:integration_bus:9.0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:integration_bus:9.0.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:integration_bus:9.0.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:integration_bus:9.0.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:integration_bus:9.0.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:integration_bus:9.0.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:integration_bus:9.0.0.8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:integration_bus:9.0.0.9:*:*:*:*:*:*:*

cpe:2.3:a:ibm:integration_bus:10.0.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:integration_bus:10.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:integration_bus:10.0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:integration_bus:10.0.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:integration_bus:10.0.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:integration_bus:10.0.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:integration_bus:10.0.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:integration_bus:10.0.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:integration_bus:10.0.0.8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:integration_bus:10.0.0.9:*:*:*:*:*:*:*

EPSS

Процентиль: 33%

0.0013

Низкий

8.1 High

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-319

Связанные уязвимости

GHSA-qwgr-49qr-w98v