CVE-2017-1721 - Vulnerability Details

Vendors	Products
Ibm	Qradar Security Information And Event Manager

Link	Providers
http://www.ibm.com/support/docview.wss?uid=swg22015799
https://exchange.xforce.ibmcloud.com/vulnerabilities/134810

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "Security QRadar SIEM", "vendor": "IBM", "versions": [{"status": "affected", "version": "7.2"}, {"status": "affected", "version": "7.3"}]}], "datePublic": "2018-04-24T00:00:00", "descriptions": [{"lang": "en", "value": "IBM Security QRadar SIEM 7.2 and 7.3 could allow an unauthenticated user to execute code remotely with lower level privileges under unusual circumstances. IBM X-Force ID: 134810."}], "problemTypes": [{"descriptions": [{"description": "Gain Privileges", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-04-26T13:57:01", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm"}, "references": [{"name": "ibm-qradar-cve20171721-code-exec(134810)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/134810"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.ibm.com/support/docview.wss?uid=swg22015799"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@us.ibm.com", "DATE_PUBLIC": "2018-04-24T00:00:00", "ID": "CVE-2017-1721", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Security QRadar SIEM", "version": {"version_data": [{"version_value": "7.2"}, {"version_value": "7.3"}]}}]}, "vendor_name": "IBM"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "IBM Security QRadar SIEM 7.2 and 7.3 could allow an unauthenticated user to execute code remotely with lower level privileges under unusual circumstances. IBM X-Force ID: 134810."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Gain Privileges"}]}]}, "references": {"reference_data": [{"name": "ibm-qradar-cve20171721-code-exec(134810)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/134810"}, {"name": "http://www.ibm.com/support/docview.wss?uid=swg22015799", "refsource": "CONFIRM", "url": "http://www.ibm.com/support/docview.wss?uid=swg22015799"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T13:39:32.234Z"}, "title": "CVE Program Container", "references": [{"name": "ibm-qradar-cve20171721-code-exec(134810)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/134810"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.ibm.com/support/docview.wss?uid=swg22015799"}]}]}, "cveMetadata": {"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2017-1721", "datePublished": "2018-04-26T14:00:00Z", "dateReserved": "2016-11-30T00:00:00", "dateUpdated": "2024-09-16T17:58:32.373Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : Security QRadar SIEM (string)

vendor : IBM (string)

versions : [ »

0 : { »

status : affected (string)

version : 7.2 (string)

}

1 : { »

status : affected (string)

version : 7.3 (string)

}

]

}

]

datePublic : 2018-04-24T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : IBM Security QRadar SIEM 7.2 and 7.3 could allow an unauthenticated user to execute code remotely with lower level privileges under unusual circumstances. IBM X-Force ID: 134810. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : Gain Privileges (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2018-04-26T13:57:01 (string)

orgId : 9a959283-ebb5-44b6-b705-dcc2bbced522 (string)

shortName : ibm (string)

}

references : [ »

0 : { »

name : ibm-qradar-cve20171721-code-exec(134810) (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_XF (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/134810 (string)

}

1 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : http://www.ibm.com/support/docview.wss?uid=swg22015799 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : psirt@us.ibm.com (string)

DATE_PUBLIC : 2018-04-24T00:00:00 (string)

ID : CVE-2017-1721 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : Security QRadar SIEM (string)

version : { »

version_data : [ »

0 : { »

version_value : 7.2 (string)

}

1 : { »

version_value : 7.3 (string)

}

]

}

]

}

vendor_name : IBM (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : IBM Security QRadar SIEM 7.2 and 7.3 could allow an unauthenticated user to execute code remotely with lower level privileges under unusual circumstances. IBM X-Force ID: 134810. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : Gain Privileges (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : ibm-qradar-cve20171721-code-exec(134810) (string)

refsource : XF (string)

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/134810 (string)

}

1 : { »

name : http://www.ibm.com/support/docview.wss?uid=swg22015799 (string)

refsource : CONFIRM (string)

url : http://www.ibm.com/support/docview.wss?uid=swg22015799 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-05T13:39:32.234Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

name : ibm-qradar-cve20171721-code-exec(134810) (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_XF (string)

2 : x_transferred (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/134810 (string)

}

1 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : http://www.ibm.com/support/docview.wss?uid=swg22015799 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 9a959283-ebb5-44b6-b705-dcc2bbced522 (string)

assignerShortName : ibm (string)

cveId : CVE-2017-1721 (string)

datePublished : 2018-04-26T14:00:00Z (string)

dateReserved : 2016-11-30T00:00:00 (string)

dateUpdated : 2024-09-16T17:58:32.373Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "C48729A8-0CF2-486B-99E4-623C9C65F994", "versionEndExcluding": "7.2.8", "versionStartIncluding": "7.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:*:*:*:*:*:*:*", "matchCriteriaId": "1C35F4DF-BFA0-4855-BBDB-CF6047AAC9D0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p1:*:*:*:*:*:*", "matchCriteriaId": "73151221-C102-4425-9316-1EE4CAAB6531", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p10:*:*:*:*:*:*", "matchCriteriaId": "D1E9DDCD-6D22-4175-94EF-D8A5457E7355", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p11:*:*:*:*:*:*", "matchCriteriaId": "35AB906F-43CD-4D54-8274-1FD551532E58", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p2:*:*:*:*:*:*", "matchCriteriaId": "2356A4E6-561B-40CA-8348-B30D581B1E46", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p3:*:*:*:*:*:*", "matchCriteriaId": "74509F3F-840E-48B8-88B1-EA4FFB90ACC3", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p4:*:*:*:*:*:*", "matchCriteriaId": "BE7BD528-628F-4CA9-9FE8-8A79BDC97680", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p5:*:*:*:*:*:*", "matchCriteriaId": "26118C2B-78CC-4038-9DEA-7A9417029790", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p6:*:*:*:*:*:*", "matchCriteriaId": "29EBC1DD-6949-4B12-8CA5-EE2BCDB8C4C3", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p7:*:*:*:*:*:*", "matchCriteriaId": "4F445D93-D482-4A74-810D-66D78CBCAFED", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p8:*:*:*:*:*:*", "matchCriteriaId": "2C9F200C-ECC9-4D51-AFE7-E99C16D09148", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p9:*:*:*:*:*:*", "matchCriteriaId": "56B87CB5-0F77-4040-BB58-9DBF5723A4FD", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "0063D4AA-6C00-4ABB-A315-27B06B5D3928", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:p1:*:*:*:*:*:*", "matchCriteriaId": "36CA1C3A-63CA-4FBD-9E84-7E83248265EB", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:p2:*:*:*:*:*:*", "matchCriteriaId": "79A243C5-59EF-4EC6-B6E3-EC905317C144", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:p3:*:*:*:*:*:*", "matchCriteriaId": "719DA85E-0541-48D2-8164-4CA53CB80826", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:p4:*:*:*:*:*:*", "matchCriteriaId": "2AE0EC49-2831-4E3A-8EA4-659FAF660620", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:p5:*:*:*:*:*:*", "matchCriteriaId": "93EB825A-16E1-442F-AC36-D9A3E1657762", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:p6:*:*:*:*:*:*", "matchCriteriaId": "120215E3-863D-4C52-9DA0-1A3C487CB3E6", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:p7:*:*:*:*:*:*", "matchCriteriaId": "0E07CA72-7CE3-4E7A-AF5B-7F109EF9B004", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "IBM Security QRadar SIEM 7.2 and 7.3 could allow an unauthenticated user to execute code remotely with lower level privileges under unusual circumstances. IBM X-Force ID: 134810."}, {"lang": "es", "value": "IBM Security QRadar SIEM 7.2 y 7.3 podr\u00eda permitir que un usuario no autenticado ejecute c\u00f3digo remoto con privilegios de bajo nivel bajo circunstancias inusuales. IBM X-Force ID: 134810."}], "id": "CVE-2017-1721", "lastModified": "2024-11-21T03:22:16.027", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.0"}, "exploitabilityScore": 2.2, "impactScore": 3.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-04-26T14:29:00.313", "references": [{"source": "psirt@us.ibm.com", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.ibm.com/support/docview.wss?uid=swg22015799"}, {"source": "psirt@us.ibm.com", "tags": ["VDB Entry"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/134810"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.ibm.com/support/docview.wss?uid=swg22015799"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["VDB Entry"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/134810"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-94"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : C48729A8-0CF2-486B-99E4-623C9C65F994 (string)

versionEndExcluding : 7.2.8 (string)

versionStartIncluding : 7.2.0 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:*:*:*:*:*:*:* (string)

matchCriteriaId : 1C35F4DF-BFA0-4855-BBDB-CF6047AAC9D0 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p1:*:*:*:*:*:* (string)

matchCriteriaId : 73151221-C102-4425-9316-1EE4CAAB6531 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p10:*:*:*:*:*:* (string)

matchCriteriaId : D1E9DDCD-6D22-4175-94EF-D8A5457E7355 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p11:*:*:*:*:*:* (string)

matchCriteriaId : 35AB906F-43CD-4D54-8274-1FD551532E58 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p2:*:*:*:*:*:* (string)

matchCriteriaId : 2356A4E6-561B-40CA-8348-B30D581B1E46 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p3:*:*:*:*:*:* (string)

matchCriteriaId : 74509F3F-840E-48B8-88B1-EA4FFB90ACC3 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p4:*:*:*:*:*:* (string)

matchCriteriaId : BE7BD528-628F-4CA9-9FE8-8A79BDC97680 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p5:*:*:*:*:*:* (string)

matchCriteriaId : 26118C2B-78CC-4038-9DEA-7A9417029790 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p6:*:*:*:*:*:* (string)

matchCriteriaId : 29EBC1DD-6949-4B12-8CA5-EE2BCDB8C4C3 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p7:*:*:*:*:*:* (string)

matchCriteriaId : 4F445D93-D482-4A74-810D-66D78CBCAFED (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p8:*:*:*:*:*:* (string)

matchCriteriaId : 2C9F200C-ECC9-4D51-AFE7-E99C16D09148 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p9:*:*:*:*:*:* (string)

matchCriteriaId : 56B87CB5-0F77-4040-BB58-9DBF5723A4FD (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 0063D4AA-6C00-4ABB-A315-27B06B5D3928 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:p1:*:*:*:*:*:* (string)

matchCriteriaId : 36CA1C3A-63CA-4FBD-9E84-7E83248265EB (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:p2:*:*:*:*:*:* (string)

matchCriteriaId : 79A243C5-59EF-4EC6-B6E3-EC905317C144 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:p3:*:*:*:*:*:* (string)

matchCriteriaId : 719DA85E-0541-48D2-8164-4CA53CB80826 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:p4:*:*:*:*:*:* (string)

matchCriteriaId : 2AE0EC49-2831-4E3A-8EA4-659FAF660620 (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:p5:*:*:*:*:*:* (string)

matchCriteriaId : 93EB825A-16E1-442F-AC36-D9A3E1657762 (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:p6:*:*:*:*:*:* (string)

matchCriteriaId : 120215E3-863D-4C52-9DA0-1A3C487CB3E6 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:p7:*:*:*:*:*:* (string)

matchCriteriaId : 0E07CA72-7CE3-4E7A-AF5B-7F109EF9B004 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : IBM Security QRadar SIEM 7.2 and 7.3 could allow an unauthenticated user to execute code remotely with lower level privileges under unusual circumstances. IBM X-Force ID: 134810. (string)

}

1 : { »

lang : es (string)

value : IBM Security QRadar SIEM 7.2 y 7.3 podría permitir que un usuario no autenticado ejecute código remoto con privilegios de bajo nivel bajo circunstancias inusuales. IBM X-Force ID: 134810. (string)

}

]

id : CVE-2017-1721 (string)

lastModified : 2024-11-21T03:22:16.027 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : MEDIUM (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : PARTIAL (string)

baseScore : 6.8 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : PARTIAL (string)

vectorString : AV:N/AC:M/Au:N/C:P/I:P/A:P (string)

version : 2.0 (string)

}

exploitabilityScore : 8.6 (number)

impactScore : 6.4 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : LOW (string)

baseScore : 5.6 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : LOW (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L (string)

version : 3.0 (string)

}

exploitabilityScore : 2.2 (number)

impactScore : 3.4 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2018-04-26T14:29:00.313 (string)

references : [ »

0 : { »

source : psirt@us.ibm.com (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : http://www.ibm.com/support/docview.wss?uid=swg22015799 (string)

}

1 : { »

source : psirt@us.ibm.com (string)

tags : [ »

0 : VDB Entry (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/134810 (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : http://www.ibm.com/support/docview.wss?uid=swg22015799 (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : VDB Entry (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/134810 (string)

}

]

sourceIdentifier : psirt@us.ibm.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-94 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object