CVE-2015-0172

Published: Apr 10, 2018Modified: Nov 21, 2024

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

IBM Security SiteProtector System 3.0, 3.1.0 and 3.1.1 allows remote attackers to bypass intended security restrictions and consequently execute unspecified commands and obtain sensitive information via unknown vectors. IBM X-Force ID: 100927.

Affected (3)

Products: Ibm: Security Siteprotector System

Ibm

1 product

Security Siteprotector System

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Siteprotector System	Version 3.0
Ibm Security Siteprotector System	Version 3.1.0.0
Ibm Security Siteprotector System	Version 3.1.1.0

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

http://www-01.ibm.com/support/docview.wss?uid=swg21699472

Source: psirt@us.ibm.com

MitigationVendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21699472

Source: af854a3a-2127-422b-91ae-364da2661108

MitigationVendor Advisory

Timeline

No history available yet.