CVE-2017-1783

Опубликовано: 29 янв. 2018

Источник: nvd

CVSS3: 4

CVSS2: 2.1

EPSS Низкий

Описание

IBM Cognos Analytics 11.0 could allow a local user to change parameters set from the Cognos Analytics menus without proper authentication. IBM X-Force ID: 136857.

Ссылки

http://www.ibm.com/support/docview.wss?uid=swg22011561
Vendor Advisory
http://www.securityfocus.com/bid/102863
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040299
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/136857
VDB Entry
Vendor Advisory
https://security.netapp.com/advisory/ntap-20190329-0003/
Broken Link
https://security.netapp.com/advisory/ntap-20190401-0003/
Third Party Advisory
http://www.ibm.com/support/docview.wss?uid=swg22011561
Vendor Advisory
http://www.securityfocus.com/bid/102863
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040299
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/136857
VDB Entry
Vendor Advisory
https://security.netapp.com/advisory/ntap-20190329-0003/
Broken Link
https://security.netapp.com/advisory/ntap-20190401-0003/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:cognos_analytics:11.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.0.5.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.0.6.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.0.7.0:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*

EPSS

Процентиль: 25%

0.00086

Низкий

4 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-q24v-96m4-8qpj