CVE-2017-1785

Опубликовано: 07 фев. 2018

Источник: nvd

CVSS3: 4.3

CVSS2: 4

EPSS Низкий

Описание

IBM API Connect 5.0.7 and 5.0.8 could allow an authenticated remote user to modify query parameters to obtain sensitive information. IBM X-Force ID: 136859.

Ссылки

http://www.ibm.com/support/docview.wss?uid=swg22013061
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/136859
VDB Entry
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22013061
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/136859
VDB Entry
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:api_connect:5.0.7.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:api_connect:5.0.7.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:api_connect:5.0.7.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:api_connect:5.0.8.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:api_connect:5.0.8.1:*:*:*:*:*:*:*

EPSS

Процентиль: 31%

0.00119

Низкий

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-gh9j-m8x8-5vh4