Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-1689 State: PUBLISHED Published: 2017-11-27T21:00:00Z Last Updated: 2024-09-17T00:51:50.051Z Vendors: IBM Products: Rational DOORS Next Generation Problem Types: Cross-Site Scripting Description: IBM DOORS Next Generation (DNG/RRC) 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134064. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22010329 - https://exchange.xforce.ibmcloud.com/vulnerabilities/134064 - http:/
//www.ibm.com/support/docview.wss?uid=swg22010329 - https://exchange.xforce.ibmcloud.com/vulnerabilities/134064 - http://www.securityfocus.com/bid/101904
CVE ID: CVE-2017-1690 State: PUBLISHED Published: 2018-07-03T19:00:00Z Last Updated: 2024-09-17T02:05:35.764Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Collaborative Lifecycle Management, Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-
thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134065. Additional Analyst Notes: - CVE Program Container: References: - https://www-prd-trops.events.ibm.com/node/715749 - https://exchange.xforce.ibmcloud.com/vulnerabilities/134065
CVE ID: CVE-2017-1691 State: PUBLISHED Published: 2018-07-03T19:00:00Z Last Updated: 2024-09-16T22:01:49.916Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager, Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-
thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134066. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/134066 - https://www-prd-trops.events.ibm.com/node/715749
CVE ID: CVE-2017-1692 State: PUBLISHED Published: 2018-02-07T17:00:00Z Last Updated: 2024-09-17T01:22:01.954Z Vendors: IBM Products: AIX Problem Types: Gain Privileges Description: IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges. IBM X-Force ID: 134067. Additional Analyst Notes: - CVE Program Container: References: - http://aix.software.ibm.com/aix/efixes/security/suid_advisory.asc - http://www.securitytracker.com/id/1040330 - https://exchange.xforce.ibmcloud.com/vulnerabilities/134067
CVE ID: CVE-2017-1693 State: PUBLISHED Published: 2018-01-19T14:00:00Z Last Updated: 2024-09-16T18:38:40.340Z Vendors: IBM Products: Integration Bus Problem Types: Gain Access Description: IBM Integration Bus 9.0 and 10.0 could allow an attacker that has captured a valid session id to hijack another users session during a small timeframe before the session times out. IBM X-Force ID: 134164. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22012642 - http://www.securityfocus.com/bid/102760 - https://exchange.xforce.ibmcloud.com/vulnerabilities/134164
CVE ID: CVE-2017-1694 State: PUBLISHED Published: 2017-12-20T18:00:00Z Last Updated: 2024-09-16T17:19:12.208Z Vendors: IBM Products: Integration Bus Problem Types: Obtain Information Description: IBM Integration Bus 9.0 and 10.0 transmits user credentials in plain in clear text which can be read by an attacker using man in the middle techniques. IBM X-Force ID: 134165. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22011695 - https://exchange.xforce.ibmcloud.com/vulnerabilities/134165 - http://www.securityfocus.com/bid/102215
CVE ID: CVE-2017-1695 State: PUBLISHED Published: 2019-02-15T20:00:00Z Last Updated: 2024-09-17T02:53:17.348Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/AC:H/AV:N/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar SIEM 7.2 and 7.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 134177. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107060 - https://exchange.xforce.ibmcloud.com/vulnerabilities/134177 - https://www.ibm.com/support/docview.wss?uid=ibm10719107
CVE ID: CVE-2017-1696 State: PUBLISHED Published: 2017-12-20T18:00:00Z Last Updated: 2024-09-16T18:19:18.369Z Vendors: IBM Products: Security QRadar SIEM Problem Types: Gain Access Description: IBM QRadar 7.2 and 7.3 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 134178. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/134178 - http://www.ibm.com/support/docview.wss?uid=swg22011730
CVE ID: CVE-2017-1698 State: PUBLISHED Published: 2017-12-27T16:00:00Z Last Updated: 2024-09-16T19:41:18.742Z Vendors: IBM Products: WebSphere Portal Problem Types: Obtain Information Description: IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could reveal sensitive information from an error message that could lead to further attacks against the system. IBM X-Force ID: 124390. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22011519 - http://www.securityfocus.com/bid/102281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/134390 - http://www.securitytracker.com/id/1040043
CVE ID: CVE-2017-1699 State: PUBLISHED Published: 2018-01-04T17:00:00Z Last Updated: 2024-09-17T03:08:03.425Z Vendors: IBM Products: MQ Problem Types: Data Manipulation Description: IBM MQ Managed File Transfer Agent 8.0 and 9.0 sets insecure permissions on certain files it creates. A local attacker could exploit this vulnerability to modify or delete data contained in the files with an unknown impact. IBM X-Force ID: 134391. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22010340 - https://exchange.xforce.ibmcloud.com/vulnerabilities/134391
CVE ID: CVE-2017-1700 State: PUBLISHED Published: 2018-04-24T14:00:00Z Last Updated: 2024-09-17T03:48:55.534Z Vendors: IBM Products: Rational Team Concert, Rational Engineering Lifecycle Manager, Rational Software Architect Design Manager, Rational Quality Manager, Rational DOORS Next Generation, Rational Collaborative Lifecycle Management, Rational Rhapsody Design Manager Problem Types: Denial of Service Description: IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle Manager (RELM), Rational Team Concert (RTC), Rational Quality Manager (RQM), Rational Rhapsody Des
Engineering Lifecycle Manager (RELM), Rational Team Concert (RTC), Rational Quality Manager (RQM), Rational Rhapsody Design Manager (Rhapsody DM), and Rational Software Architect (RSA DM) could allow an authenticated user to cause a denial of service due to incorrect authorization for resource intensive scenarios. IBM X-Force ID: 134392. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/134392 - http://www.ibm.com/support/docview.wss?uid=swg22015635
CVE ID: CVE-2017-1701 State: PUBLISHED Published: 2018-04-23T13:00:00Z Last Updated: 2024-09-16T22:31:13.326Z Vendors: IBM Products: Rational Team Concert Problem Types: Obtain Information Description: IBM Team Concert (RTC) 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, and 6.0.5 stores credentials for users using a weak encryption algorithm, which could allow an authenticated user to obtain highly sensitive information. IBM X-Force ID: 134393. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/134393 - http://www.ibm.com/support/docview.wss?uid=swg22015454
CVE ID: CVE-2017-1705 State: PUBLISHED Published: 2018-03-30T16:00:00Z Last Updated: 2024-09-16T21:08:11.571Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/UI:N) Vendors: IBM Products: Security Privileged Identity Manager Problem Types: Obtain Information Description: IBM Security Privileged Identity Manager 2.1.0 contains left-over, sensitive information in page comments. While this information is not visible at first it can be obtained by viewing the page source. IBM X-Force ID: 134427. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22014988 - http://www.securityfocus.com/bid/103677 - https://exchange.xfor
http://www.ibm.com/support/docview.wss?uid=swg22014988 - http://www.securityfocus.com/bid/103677 - https://exchange.xforce.ibmcloud.com/vulnerabilities/134427
CVE ID: CVE-2017-1710 State: PUBLISHED Published: 2017-11-13T23:00:00Z Last Updated: 2024-09-17T01:25:35.327Z Vendors: IBM Products: Storwize V7000 (2076) Problem Types: Gain Privileges Description: A vulnerability in the Service Assistant GUI in IBM Storwize V7000 (2076) 8.1 could allow a remote attacker to perform a privilege escalation. IBM X-Force ID: 134531. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ssg1S1010788 - http://www.securitytracker.com/id/1039776 - https://exchange.xforce.ibmcloud.com/vulnerabilities/134531 - http://www.securityfocus.com/bid/101770
CVE ID: CVE-2017-1711 State: PUBLISHED Published: 2018-02-13T20:00:00Z Last Updated: 2024-09-17T04:29:16.940Z Vendors: IBM Products: Client Application Access, Notes Problem Types: Gain Privileges Description: IBM iNotes 8.5 and 9.0 SUService can be misguided into running malicious code from a DLL masquerading as a windows DLL in the temp directory. IBM X-Force ID: 134532. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22010774 - http://www.ibm.com/support/docview.wss?uid=swg22010775 - https://exchange.xforce.ibmcloud.com/vulnerabilities/134532
CVE ID: CVE-2017-1712 State: PUBLISHED Published: 2020-07-01T13:47:50 Last Updated: 2024-08-05T13:39:31.993Z Vendors: n/a Products: "HCL Domino" Problem Types: "Return of Bleichenbacher's Oracle Threat (ROBOT)" Description: "A vulnerability in the TLS protocol implementation of the Domino server could allow an unauthenticated, remote attacker to access sensitive information, aka a Return of Bleichenbacher's Oracle Threat (ROBOT) attack. An attacker could iteratively query a server running a vulnerable TLS stack implementation to perform cryptanalytic operations that may allow decryption of previously captured TLS sessions." Additional Analyst Notes: - CVE Program Container: References: - htt
ow decryption of previously captured TLS sessions." Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0080545
CVE ID: CVE-2017-1713 State: PUBLISHED Published: 2019-03-21T14:35:28.015599Z Last Updated: 2024-09-16T18:39:40.397Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/UI:N/I:N/S:U/PR:N/AV:N/C:H/A:N/AC:H/E:U/RL:O/RC:C) Vendors: IBM Products: Streams Problem Types: Obtain Information Description: IBM InfoSphere Streams 4.2.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 134632. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22016056 - https://exchange.xforce.ibmcloud.com/vulnerabilities/134632
CVE ID: CVE-2017-1714 State: PUBLISHED Published: 2018-02-13T20:00:00Z Last Updated: 2024-09-17T02:56:31.561Z Vendors: IBM Products: Client Application Access, Notes Problem Types: Gain Privileges Description: IBM Notes and Domino NSD 8.5 and 9.0 could allow an authenticated local user without administrative privileges to gain System privilege. IBM X-Force ID: 134633. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22010777 - https://exchange.xforce.ibmcloud.com/vulnerabilities/134633 - http://www.ibm.com/support/docview.wss?uid=swg22010776
CVE ID: CVE-2017-1715 State: PUBLISHED Published: 2018-07-03T19:00:00Z Last Updated: 2024-09-16T18:44:00.493Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Collaborative Lifecycle Management, Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-
thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134637. Additional Analyst Notes: - CVE Program Container: References: - https://www-prd-trops.events.ibm.com/node/715749 - https://exchange.xforce.ibmcloud.com/vulnerabilities/134637
CVE ID: CVE-2017-1716 State: PUBLISHED Published: 2017-12-13T18:00:00Z Last Updated: 2024-09-17T01:32:04.167Z Vendors: IBM Products: Tivoli Workload Scheduler Problem Types: Obtain Information Description: IBM Tivoli Workload Scheduler 8.6.0, 9.1.0, and 9.2.0 could disclose sensitive information to a local attacker due to improper permission settings. IBM X-Force ID: 134638. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101974 - http://www-01.ibm.com/support/docview.wss?uid=swg22010947 - https://exchange.xforce.ibmcloud.com/vulnerabilities/134638
CVE ID: CVE-2017-1717 State: PUBLISHED Published: 2018-07-03T19:00:00Z Last Updated: 2024-09-17T00:36:01.898Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager, Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-
thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134796. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/134796 - https://www-prd-trops.events.ibm.com/node/715749
CVE ID: CVE-2017-1720 State: PUBLISHED Published: 2018-02-13T20:00:00Z Last Updated: 2024-09-16T22:20:55.622Z Vendors: IBM Products: Client Application Access, Notes Problem Types: Gain Privileges Description: IBM Notes 8.5 and 9.0 could allow a local attacker to execute arbitrary commands by carefully crafting a command line sent via the shared memory IPC. IBM X-Force ID: 134807. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/134807 - http://www.ibm.com/support/docview.wss?uid=swg22010766 - http://www.ibm.com/support/docview.wss?uid=swg22010767
CVE ID: CVE-2017-1721 State: PUBLISHED Published: 2018-04-26T14:00:00Z Last Updated: 2024-09-16T17:58:32.373Z Vendors: IBM Products: Security QRadar SIEM Problem Types: Gain Privileges Description: IBM Security QRadar SIEM 7.2 and 7.3 could allow an unauthenticated user to execute code remotely with lower level privileges under unusual circumstances. IBM X-Force ID: 134810. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/134810 - http://www.ibm.com/support/docview.wss?uid=swg22015799
CVE ID: CVE-2017-1722 State: PUBLISHED Published: 2018-04-26T14:00:00Z Last Updated: 2024-09-17T03:38:53.369Z Vendors: IBM Products: Security QRadar SIEM Problem Types: Data Manipulation Description: IBM Security QRadar SIEM 7.2 and 7.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 134811. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22015802 - https://exchange.xforce.ibmcloud.com/vulnerabilities/134811
CVE ID: CVE-2017-1723 State: PUBLISHED Published: 2018-04-26T14:00:00Z Last Updated: 2024-09-17T02:42:09.768Z Vendors: IBM Products: Security QRadar SIEM Problem Types: Obtain Information Description: IBM Security QRadar SIEM 7.2 and 7.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 134812. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/134812 - http://www.ibm.com/support/docview.wss?uid=swg22015804
CVE ID: CVE-2017-1724 State: PUBLISHED Published: 2018-04-26T14:00:00Z Last Updated: 2024-09-16T22:55:59.759Z Vendors: IBM Products: Security QRadar SIEM Problem Types: Cross-Site Scripting Description: IBM Security QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134814. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22015807 - https://exchange.xforce.ibmcloud.com/vulnerabilities/134814
CVE ID: CVE-2017-1725 State: PUBLISHED Published: 2018-04-24T14:00:00Z Last Updated: 2024-09-16T21:57:15.432Z Vendors: IBM Products: Rational Quality Manager, Rational Collaborative Lifecycle Management, Rational Engineering Lifecycle Manager, Rational DOORS Next Generation, Rational Software Architect Design Manager, Rational Team Concert, Rational Rhapsody Design Manager Problem Types: Obtain Information Description: IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle Manager (RELM), Rational Team Concert (RTC), Rational Quality Manager (RQM), Rational Rhapsody De
Engineering Lifecycle Manager (RELM), Rational Team Concert (RTC), Rational Quality Manager (RQM), Rational Rhapsody Design Manager (Rhapsody DM), and Rational Software Architect (RSA DM) contain an undisclosed vulnerability with the potential for information disclosure. IBM X-Force ID: 134820. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/134820 - http://www.ibm.com/support/docview.wss?uid=swg22015635
CVE ID: CVE-2017-1727 State: PUBLISHED Published: 2018-01-04T17:00:00Z Last Updated: 2024-09-16T17:53:08.486Z Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: Obtain Information Description: IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 discloses sensitive information in error messages that could aid an attacker in further attacks against the system. IBM X-Force ID: 134869. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22012012 - http://www.securityfocus.com/bid/102432 - https://exchange.xforce.ibmcloud.com/vulnerabilities/134869
CVE ID: CVE-2017-1729 State: PUBLISHED Published: 2018-07-10T16:00:00Z Last Updated: 2024-09-16T16:27:30.089Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134909. Additional Analyst Notes: - CVE Program Container: References: - https://exchan
trusted session. IBM X-Force ID: 134909. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/134909 - http://www.ibm.com/support/docview.wss?uid=ibm10716607
CVE ID: CVE-2017-1731 State: PUBLISHED Published: 2018-01-30T18:00:00Z Last Updated: 2024-09-16T18:54:30.990Z Vendors: IBM Products: WebSphere Application Server Problem Types: Gain Privileges Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected security when using the Administrative Console. An authenticated remote attacker could exploit this vulnerability to possibly gain elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/134912 - http://www-01.ibm.com/support/docview.wss?uid=swg22012345&myns=swgws&mynp=OCSSEQTP&mync=R&cm_sp=swgws-_-OCSSEQTP-_-R - http:
://www-01.ibm.com/support/docview.wss?uid=swg22012345&myns=swgws&mynp=OCSSEQTP&mync=R&cm_sp=swgws-_-OCSSEQTP-_-R - http://www.securitytracker.com/id/1040356 - http://www.securityfocus.com/bid/102911
CVE ID: CVE-2017-1732 State: PUBLISHED Published: 2018-08-17T16:00:00Z Last Updated: 2024-09-16T16:44:08.655Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Security Access Manager for Enterprise Single Sign-On Problem Types: Obtain Information Description: IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by sno
the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 134913. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=ibm10726017 - https://exchange.xforce.ibmcloud.com/vulnerabilities/134913
CVE ID: CVE-2017-1733 State: PUBLISHED Published: 2018-04-04T18:00:00Z Last Updated: 2024-09-16T18:13:49.490Z Severity: MEDIUM (CVSS 4 CVSS:3.0/A:N/AC:L/AV:L/C:L/I:N/PR:N/S:U/UI:N) Vendors: IBM Products: Security QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar 7.3 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 134914. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103736 - https://exchange.xforce.ibmcloud.com/vulnerabilities/134914 - http://www.ibm.com/support/docview.wss?uid=swg22015243