PT-2017-12073 · Ibm · Ibm Tririga Report Manager

Published 2017-03-27 · Updated 2019-10-03 · CVE-2017-1153

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Report Manager versions 3.2 through 3.5

Description The issue allows an authenticated user to execute actions that they do not have access to.

Recommendations For versions 3.2 through 3.5, update to a version that contains a fix for this issue to prevent unauthorized access to actions.

Fix

Related Identifiers

CVE-2017-1153

Affected Products

Ibm Tririga Report Manager

References · 4

• http://ibm.com/support/docview.wss?uid=swg21999563 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-1153 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-1153 · Security Note
• http://securityfocus.com/bid/97066 · Note