CVE-2017-1681

Published: Jan 11, 2018Modified: Nov 21, 2024

3.3

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 1.8 / Impact: 1.4

Source: NVD

Description

IBM WebSphere Application Server (IBM Liberty for Java for Bluemix 3.15) could allow a local attacker to obtain sensitive information, caused by improper handling of application requests, which could allow unauthorized access to read a file. IBM X-Force ID: 134003.

Affected (1)

Products: Ibm: Liberty

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ibm Liberty	Up to 3.15

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (6)

http://www.ibm.com/support/docview.wss?uid=swg22011863

Source: psirt@us.ibm.com

Vendor Advisory

http://www.securitytracker.com/id/1040357

Source: psirt@us.ibm.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/134003

Source: psirt@us.ibm.com

VDB Entry

http://www.ibm.com/support/docview.wss?uid=swg22011863

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securitytracker.com/id/1040357

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/134003

Source: af854a3a-2127-422b-91ae-364da2661108

VDB Entry

Timeline

No history available yet.