PT-2017-14737 · Ibm · Ibm Tivoli Workload Scheduler

Published 2017-12-13 · Updated 2019-10-03 · CVE-2017-1716

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Tivoli Workload Scheduler versions 8.6.0, 9.1.0, and 9.2.0

Description The issue could disclose sensitive information to a local attacker due to improper permission settings.

Recommendations For versions 8.6.0, 9.1.0, and 9.2.0, update the permission settings to properly restrict access to sensitive information.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2017-1716

Affected Products

Ibm Tivoli Workload Scheduler

References · 5

• https://osv.dev/vulnerability/CVE-2017-1716 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg22010947 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-1716 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/134638 · Vendor Advisory
• http://securityfocus.com/bid/101974 · Note