PT-2019-9982 · Ibm · Ibm Tririga Application Platform

Publicado 2019-05-07 · Atualizado 2019-06-21 · CVE-2018-2008

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 3.5.3 through 3.6.0

Description The issue could disclose sensitive information to an authenticated user, potentially aiding in further attacks against the system.

Recommendations For versions 3.5.3 and 3.6.0, update to a version that includes the fix for this issue to prevent sensitive information disclosure.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2018-2008

Produtos afetados

Ibm Tririga Application Platform

Referências · 5

• https://osv.dev/vulnerability/CVE-2018-2008 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-2008 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/155146 · Aviso do Fabricante
• http://ibm.com/support/docview.wss?uid=ibm10879463 · Aviso do Fabricante
• http://securityfocus.com/bid/108843 · Nota