CVE-2017-1654 - Vulnerability Details

Vendors	Products
Ibm	General Parallel File System Spectrum Scale

Link	Providers
http://www.ibm.com/support/docview.wss?uid=ssg1S1010869
http://www.securitytracker.com/id/1040747
https://exchange.xforce.ibmcloud.com/vulnerabilities/133378

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "Spectrum Scale", "vendor": "IBM", "versions": [{"status": "affected", "version": "4.1.1"}, {"status": "affected", "version": "4.2.0"}, {"status": "affected", "version": "4.2.1"}, {"status": "affected", "version": "4.2.2"}, {"status": "affected", "version": "4.2.3"}]}], "datePublic": "2018-02-26T00:00:00", "descriptions": [{"lang": "en", "value": "IBM Spectrum Scale 4.1.1 and 4.2.0 - 4.2.3 could allow a local unprivileged user access to information located in dump files. User data could be sent to IBM during service engagements. IBM X-Force ID: 133378."}], "metrics": [{"cvssV3_0": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/A:N/AC:L/AV:L/C:L/I:N/PR:N/S:U/UI:N", "version": "3.0"}}], "problemTypes": [{"descriptions": [{"description": "Obtain Information", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-04-25T09:57:01", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/133378"}, {"name": "1040747", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id/1040747"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.ibm.com/support/docview.wss?uid=ssg1S1010869"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@us.ibm.com", "DATE_PUBLIC": "2018-02-26T00:00:00", "ID": "CVE-2017-1654", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Spectrum Scale", "version": {"version_data": [{"version_value": "4.1.1"}, {"version_value": "4.2.0"}, {"version_value": "4.2.1"}, {"version_value": "4.2.2"}, {"version_value": "4.2.3"}]}}]}, "vendor_name": "IBM"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "IBM Spectrum Scale 4.1.1 and 4.2.0 - 4.2.3 could allow a local unprivileged user access to information located in dump files. User data could be sent to IBM during service engagements. IBM X-Force ID: 133378."}]}, "impact": {"cvssv3": {"BM": {"A": "N", "AC": "L", "AV": "L", "C": "L", "I": "N", "PR": "N", "S": "U", "UI": "N"}}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Obtain Information"}]}]}, "references": {"reference_data": [{"name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/133378", "refsource": "MISC", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/133378"}, {"name": "1040747", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1040747"}, {"name": "http://www.ibm.com/support/docview.wss?uid=ssg1S1010869", "refsource": "CONFIRM", "url": "http://www.ibm.com/support/docview.wss?uid=ssg1S1010869"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T13:39:31.875Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/133378"}, {"name": "1040747", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id/1040747"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.ibm.com/support/docview.wss?uid=ssg1S1010869"}]}]}, "cveMetadata": {"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2017-1654", "datePublished": "2018-03-02T17:00:00Z", "dateReserved": "2016-11-30T00:00:00", "dateUpdated": "2024-09-16T18:54:11.439Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : Spectrum Scale (string)

vendor : IBM (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.1.1 (string)

}

1 : { »

status : affected (string)

version : 4.2.0 (string)

}

2 : { »

status : affected (string)

version : 4.2.1 (string)

}

3 : { »

status : affected (string)

version : 4.2.2 (string)

}

4 : { »

status : affected (string)

version : 4.2.3 (string)

}

]

}

]

datePublic : 2018-02-26T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : IBM Spectrum Scale 4.1.1 and 4.2.0 - 4.2.3 could allow a local unprivileged user access to information located in dump files. User data could be sent to IBM during service engagements. IBM X-Force ID: 133378. (string)

}

]

metrics : [ »

0 : { »

cvssV3_0 : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : NONE (string)

baseScore : 4 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/A:N/AC:L/AV:L/C:L/I:N/PR:N/S:U/UI:N (string)

version : 3.0 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : Obtain Information (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2018-04-25T09:57:01 (string)

orgId : 9a959283-ebb5-44b6-b705-dcc2bbced522 (string)

shortName : ibm (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/133378 (string)

}

1 : { »

name : 1040747 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_SECTRACK (string)

]

url : http://www.securitytracker.com/id/1040747 (string)

}

2 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : http://www.ibm.com/support/docview.wss?uid=ssg1S1010869 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : psirt@us.ibm.com (string)

DATE_PUBLIC : 2018-02-26T00:00:00 (string)

ID : CVE-2017-1654 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : Spectrum Scale (string)

version : { »

version_data : [ »

0 : { »

version_value : 4.1.1 (string)

}

1 : { »

version_value : 4.2.0 (string)

}

2 : { »

version_value : 4.2.1 (string)

}

3 : { »

version_value : 4.2.2 (string)

}

4 : { »

version_value : 4.2.3 (string)

}

]

}

]

}

vendor_name : IBM (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : IBM Spectrum Scale 4.1.1 and 4.2.0 - 4.2.3 could allow a local unprivileged user access to information located in dump files. User data could be sent to IBM during service engagements. IBM X-Force ID: 133378. (string)

}

]

}

impact : { »

cvssv3 : { »

BM : { »

A : N (string)

AC : L (string)

AV : L (string)

C : L (string)

I : N (string)

PR : N (string)

S : U (string)

UI : N (string)

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : Obtain Information (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://exchange.xforce.ibmcloud.com/vulnerabilities/133378 (string)

refsource : MISC (string)

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/133378 (string)

}

1 : { »

name : 1040747 (string)

refsource : SECTRACK (string)

url : http://www.securitytracker.com/id/1040747 (string)

}

2 : { »

name : http://www.ibm.com/support/docview.wss?uid=ssg1S1010869 (string)

refsource : CONFIRM (string)

url : http://www.ibm.com/support/docview.wss?uid=ssg1S1010869 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-05T13:39:31.875Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/133378 (string)

}

1 : { »

name : 1040747 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_SECTRACK (string)

2 : x_transferred (string)

]

url : http://www.securitytracker.com/id/1040747 (string)

}

2 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : http://www.ibm.com/support/docview.wss?uid=ssg1S1010869 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 9a959283-ebb5-44b6-b705-dcc2bbced522 (string)

assignerShortName : ibm (string)

cveId : CVE-2017-1654 (string)

datePublished : 2018-03-02T17:00:00Z (string)

dateReserved : 2016-11-30T00:00:00 (string)

dateUpdated : 2024-09-16T18:54:11.439Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:spectrum_scale:*:*:*:*:*:*:*:*", "matchCriteriaId": "FFC783AA-F7AA-40A1-8277-214F0D8B118A", "versionEndIncluding": "4.1.1.18", "versionStartIncluding": "4.1.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:spectrum_scale:*:*:*:*:*:*:*:*", "matchCriteriaId": "9D23238D-249E-4DE9-9AD1-561EFB0B8518", "versionEndIncluding": "4.2.0.4", "versionStartIncluding": "4.2.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:spectrum_scale:*:*:*:*:*:*:*:*", "matchCriteriaId": "208F0B90-ABE8-40DA-8344-39C7815B3116", "versionEndIncluding": "4.2.1.2", "versionStartIncluding": "4.2.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:spectrum_scale:*:*:*:*:*:*:*:*", "matchCriteriaId": "4D93CD87-07E5-4020-9383-CFE6219BD243", "versionEndIncluding": "4.2.2.3", "versionStartIncluding": "4.2.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:spectrum_scale:*:*:*:*:*:*:*:*", "matchCriteriaId": "6305DEAF-8694-4BCD-8974-A5270268DC79", "versionEndIncluding": "4.2.3.6", "versionStartIncluding": "4.2.3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:spectrum_scale:5.0.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "86C6E40C-8563-438B-AA6A-1C716B6FF1D9", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "E78F4327-0160-467E-8C2C-BDEBB4149227", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "BDD19B4F-5738-4CB1-99FC-F40FDA8388AE", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "B497D629-62AB-4F21-BDF4-02336A19E04C", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "10E68BB2-4132-46F1-B8E9-9FA03FEB92BF", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "E1CBA1A7-02AF-4D59-A6FF-9C52903986EE", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "BEAC1912-1412-45B6-920C-A52510095977", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "59A4A5C6-8DF0-4431-BE2C-5C6815371C98", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.7:*:*:*:*:*:*:*", "matchCriteriaId": "F90908FF-0E10-4AFD-A38C-4D5E50C05FF3", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.8:*:*:*:*:*:*:*", "matchCriteriaId": "591E5985-29A1-4C06-8832-DA1587CFE101", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "IBM Spectrum Scale 4.1.1 and 4.2.0 - 4.2.3 could allow a local unprivileged user access to information located in dump files. User data could be sent to IBM during service engagements. IBM X-Force ID: 133378."}, {"lang": "es", "value": "IBM Spectrum Scale 4.1.1 y 4.2.0 - 4.2.3 podr\u00eda permitir que un usuario local sin privilegios acceda a informaci\u00f3n situada en archivos de volcado. Los datos de usuario podr\u00edan enviarse a IBM durante las interacciones del servicio. IBM X-Force ID: 133378."}], "id": "CVE-2017-1654", "lastModified": "2024-11-21T03:22:10.793", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.0, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 2.5, "impactScore": 1.4, "source": "psirt@us.ibm.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 1.8, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-03-02T17:29:00.217", "references": [{"source": "psirt@us.ibm.com", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.ibm.com/support/docview.wss?uid=ssg1S1010869"}, {"source": "psirt@us.ibm.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1040747"}, {"source": "psirt@us.ibm.com", "tags": ["VDB Entry", "Vendor Advisory"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/133378"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.ibm.com/support/docview.wss?uid=ssg1S1010869"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1040747"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["VDB Entry", "Vendor Advisory"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/133378"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:ibm:spectrum_scale:*:*:*:*:*:*:*:* (string)

matchCriteriaId : FFC783AA-F7AA-40A1-8277-214F0D8B118A (string)

versionEndIncluding : 4.1.1.18 (string)

versionStartIncluding : 4.1.1.0 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:ibm:spectrum_scale:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 9D23238D-249E-4DE9-9AD1-561EFB0B8518 (string)

versionEndIncluding : 4.2.0.4 (string)

versionStartIncluding : 4.2.0.0 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:ibm:spectrum_scale:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 208F0B90-ABE8-40DA-8344-39C7815B3116 (string)

versionEndIncluding : 4.2.1.2 (string)

versionStartIncluding : 4.2.1.0 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:ibm:spectrum_scale:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 4D93CD87-07E5-4020-9383-CFE6219BD243 (string)

versionEndIncluding : 4.2.2.3 (string)

versionStartIncluding : 4.2.2.0 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:ibm:spectrum_scale:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 6305DEAF-8694-4BCD-8974-A5270268DC79 (string)

versionEndIncluding : 4.2.3.6 (string)

versionStartIncluding : 4.2.3.0 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:ibm:spectrum_scale:5.0.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 86C6E40C-8563-438B-AA6A-1C716B6FF1D9 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : E78F4327-0160-467E-8C2C-BDEBB4149227 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.1:*:*:*:*:*:*:* (string)

matchCriteriaId : BDD19B4F-5738-4CB1-99FC-F40FDA8388AE (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.2:*:*:*:*:*:*:* (string)

matchCriteriaId : B497D629-62AB-4F21-BDF4-02336A19E04C (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 10E68BB2-4132-46F1-B8E9-9FA03FEB92BF (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.4:*:*:*:*:*:*:* (string)

matchCriteriaId : E1CBA1A7-02AF-4D59-A6FF-9C52903986EE (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.5:*:*:*:*:*:*:* (string)

matchCriteriaId : BEAC1912-1412-45B6-920C-A52510095977 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.6:*:*:*:*:*:*:* (string)

matchCriteriaId : 59A4A5C6-8DF0-4431-BE2C-5C6815371C98 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.7:*:*:*:*:*:*:* (string)

matchCriteriaId : F90908FF-0E10-4AFD-A38C-4D5E50C05FF3 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:ibm:general_parallel_file_system:4.1.0.8:*:*:*:*:*:*:* (string)

matchCriteriaId : 591E5985-29A1-4C06-8832-DA1587CFE101 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : IBM Spectrum Scale 4.1.1 and 4.2.0 - 4.2.3 could allow a local unprivileged user access to information located in dump files. User data could be sent to IBM during service engagements. IBM X-Force ID: 133378. (string)

}

1 : { »

lang : es (string)

value : IBM Spectrum Scale 4.1.1 y 4.2.0 - 4.2.3 podría permitir que un usuario local sin privilegios acceda a información situada en archivos de volcado. Los datos de usuario podrían enviarse a IBM durante las interacciones del servicio. IBM X-Force ID: 133378. (string)

}

]

id : CVE-2017-1654 (string)

lastModified : 2024-11-21T03:22:10.793 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : LOW (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : LOCAL (string)

authentication : NONE (string)

availabilityImpact : NONE (string)

baseScore : 2.1 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : NONE (string)

vectorString : AV:L/AC:L/Au:N/C:P/I:N/A:N (string)

version : 2.0 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : NONE (string)

baseScore : 4 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N (string)

version : 3.0 (string)

}

exploitabilityScore : 2.5 (number)

impactScore : 1.4 (number)

source : psirt@us.ibm.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : NONE (string)

baseScore : 3.3 (number)

baseSeverity : LOW (string)

confidentialityImpact : LOW (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N (string)

version : 3.0 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 1.4 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2018-03-02T17:29:00.217 (string)

references : [ »

0 : { »

source : psirt@us.ibm.com (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : http://www.ibm.com/support/docview.wss?uid=ssg1S1010869 (string)

}

1 : { »

source : psirt@us.ibm.com (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://www.securitytracker.com/id/1040747 (string)

}

2 : { »

source : psirt@us.ibm.com (string)

tags : [ »

0 : VDB Entry (string)

1 : Vendor Advisory (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/133378 (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : http://www.ibm.com/support/docview.wss?uid=ssg1S1010869 (string)

}

4 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://www.securitytracker.com/id/1040747 (string)

}

5 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : VDB Entry (string)

1 : Vendor Advisory (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/133378 (string)

}

]

sourceIdentifier : psirt@us.ibm.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-200 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object