PT-2018-6338 · Ibm · Ibm Openpages Grc Platform

Anu Bakshi · Publicado 2018-09-10 · Atualizado 2019-10-09 · CVE-2017-1679

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: IBM OpenPages GRC Platform versions 7.2 through 8.0

Description: The issue allows an attacker to obtain sensitive information from error log files.

Recommendations: For IBM OpenPages GRC Platform versions 7.2 through 8.0, consider restricting access to error log files to minimize the risk of sensitive information disclosure until a patch is available.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-1679

Produtos afetados

Ibm Openpages Grc Platform

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-1679 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-1679 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/134001 · Aviso do Fabricante
• https://ibm.com/support/docview.wss?uid=ibm10728737 · Aviso do Fabricante