PT-2017-12911 · Ibm · Daeja Viewone Virtual+2

Published 2017-07-13 · Updated 2019-10-03 · CVE-2017-1308

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Daeja ViewONE Professional, Standard & Virtual versions 4.1.5.1 and 5.0

Description The issue is related to improper access controls, allowing an authenticated attacker to download files they should not have access to.

Recommendations For version 4.1.5.1, update to a version that addresses the improper access controls issue. For version 5.0, update to a version that addresses the improper access controls issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Files Accessible to External Parties

Weakness Enumeration

CWE-552

Related Identifiers

CVE-2017-1308

Affected Products

Daeja Viewone Professional

Daeja Viewone Standard

Daeja Viewone Virtual

References · 5

• https://osv.dev/vulnerability/CVE-2017-1308 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-1308 · Security Note
• http://ibm.com/support/docview.wss?uid=swg22003806 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/125462 · Vendor Advisory
• http://securityfocus.com/bid/99549 · Note