CVE-2017-1784

Опубликовано: 29 янв. 2018

Источник: nvd

CVSS3: 5.5

CVSS2: 2.1

EPSS Низкий

Описание

IBM Cognos Analytics 11.0 could produce results in temporary files that contain highly sensitive information that can be read by a local user. IBM X-Force ID: 136858.

Ссылки

http://www.ibm.com/support/docview.wss?uid=swg22011561
Patch
Vendor Advisory
http://www.securitytracker.com/id/1040299
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/136858
VDB Entry
Vendor Advisory
https://security.netapp.com/advisory/ntap-20190329-0003/
Broken Link
https://security.netapp.com/advisory/ntap-20190401-0003/
Third Party Advisory
http://www.ibm.com/support/docview.wss?uid=swg22011561
Patch
Vendor Advisory
http://www.securitytracker.com/id/1040299
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/136858
VDB Entry
Vendor Advisory
https://security.netapp.com/advisory/ntap-20190329-0003/
Broken Link
https://security.netapp.com/advisory/ntap-20190401-0003/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:cognos_analytics:11.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.0.5.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.0.6.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.0.7.0:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*

EPSS

Процентиль: 36%

0.00153

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-pm7j-hcwj-f489