PT-2017-12981 · Ibm · Ibm Business Process Manager

Publicado 2017-09-25 · Atualizado 2017-09-28 · CVE-2017-1346

Positive Technologies (AI Summary)

CVSS v3.1

2.5

Baixa

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Business Process Manager versions 7.5 through 8.5

Description The issue allows a local user to read files temporarily stored in a folder during offline installs, within a short timespan.

Recommendations For versions 7.5 through 8.5, consider restricting access to the temporary folder used during offline installs to prevent unauthorized reading of files.

Correção

Race Condition

Information Disclosure

Enumeração de Fraquezas

CWE-362

CWE-200

Identificadores relacionados

CVE-2017-1346

Produtos afetados

Ibm Business Process Manager

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-1346 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/126461 · Aviso do Fabricante
• http://securityfocus.com/bid/100964 · Nota
• http://ibm.com/support/docview.wss?uid=swg22004654 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-1346 · Aviso do Fabricante