PT-2017-13303 · Ibm · Ibm Maas360 Dtm

Published 2017-08-22 · Updated 2017-08-30 · CVE-2017-1422

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM MaaS360 DTM versions up to 3.81

Description The issue concerns improper verification of user rights for certain applications, potentially leading to the disclosure of sensitive information.

Recommendations For versions up to 3.81, update to a version that contains a fix for this issue to ensure proper verification of user rights and prevent potential information disclosure.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-1422

Affected Products

Ibm Maas360 Dtm

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-1422 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/127412 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=swg22006985 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-1422 · Vendor Advisory
• http://securityfocus.com/bid/100415 · Note