← Back

CVE-2017-1308

nvd nist
Published: Jul 13, 2017Modified: May 13, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0 could allow an authenticated attacker to download files they should not have access to due to improper access controls. IBM X-Force ID: 125462.

Affected (7)

Products: Ibm: Daeja Viewone
Ibm
1 product
Daeja Viewone
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Daeja Viewone
Version 4.1.5.1
Daeja Viewone
Version 4.1.5.1
Daeja Viewone
Version 4.1.5.1
Daeja Viewone
Version 4.1.5
Daeja Viewone
Version 4.1.5
Daeja Viewone
Version 4.1.5
Daeja Viewone
Version 5.0

Related CWEs

CWE-552
Files or Directories Accessible to External Parties
The product makes files or directories accessible to unauthorized actors, even though they should not be.

References (6)

Source: psirt@us.ibm.com
PatchVendor Advisory
Source: psirt@us.ibm.com
Third Party AdvisoryVDB Entry
Source: psirt@us.ibm.com
VDB EntryVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
VDB EntryVendor Advisory

Timeline

No history available yet.