PT-2017-13028 · Ibm · Ibm Jazz Reporting Service

Publicado 2017-07-31 · Atualizado 2019-10-03 · CVE-2017-1370

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service (JRS) versions 5.0 through 6.0

Description The issue could disclose sensitive information, including user credentials, through an error message from the Report Builder administrator configuration page.

Recommendations For versions 5.0 through 6.0, update to a version that includes a fix for this issue to prevent sensitive information disclosure.

Correção

Generation of Error Message Containing Sensitive Information

Enumeração de Fraquezas

CWE-209

Identificadores relacionados

CVE-2017-1370

Produtos afetados

Ibm Jazz Reporting Service

Referências · 5

• http://ibm.com/support/docview.wss?uid=swg22005868 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-1370 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-1370 · Aviso do Fabricante
• http://securityfocus.com/bid/99954 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/126863 · Aviso do Fabricante