PT-2017-12911 · Ibm · Daeja Viewone Virtual+2

Publicado 2017-07-13 · Atualizado 2019-10-03 · CVE-2017-1308

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Daeja ViewONE Professional, Standard & Virtual versions 4.1.5.1 and 5.0

Description The issue is related to improper access controls, allowing an authenticated attacker to download files they should not have access to.

Recommendations For version 4.1.5.1, update to a version that addresses the improper access controls issue. For version 5.0, update to a version that addresses the improper access controls issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Files Accessible to External Parties

Enumeração de Fraquezas

CWE-552

Identificadores relacionados

CVE-2017-1308

Produtos afetados

Daeja Viewone Professional

Daeja Viewone Standard

Daeja Viewone Virtual

Referências · 5

• https://osv.dev/vulnerability/CVE-2017-1308 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-1308 · Nota de Segurança
• http://ibm.com/support/docview.wss?uid=swg22003806 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/125462 · Aviso do Fabricante
• http://securityfocus.com/bid/99549 · Nota