CVE-2017-1787

Published: Mar 2, 2018Modified: Mar 25, 2025

6.7

Vector

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

IBM Publishing Engine 2.1.2 and 6.0.5 contains an undisclosed vulnerability that could allow a local user with administrative privileges to obtain hard coded user credentials. IBM X-Force ID: 137022.

Affected (2)

Products: Ibm: Engineering Lifecycle Optimization Publishing

Ibm

1 product

Engineering Lifecycle Optimization Publishing

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ibm Engineering Lifecycle Optimization Publishing	Version 2.1.2
Ibm Engineering Lifecycle Optimization Publishing	Version 6.0.5

Related CWEs

CWE-798

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

References (6)

http://www.ibm.com/support/docview.wss?uid=swg22013961

Source: psirt@us.ibm.com

PatchVendor Advisory

http://www.securityfocus.com/bid/103252

Source: psirt@us.ibm.com

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/137022

Source: psirt@us.ibm.com

VDB EntryVendor Advisory

http://www.ibm.com/support/docview.wss?uid=swg22013961

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/103252

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/137022

Source: af854a3a-2127-422b-91ae-364da2661108

VDB EntryVendor Advisory

Timeline

No history available yet.