Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-1340 State: PUBLISHED Published: 2017-11-01T21:00:00Z Last Updated: 2024-09-17T03:08:20.884Z Vendors: IBM Products: Jazz Reporting Service Problem Types: Obtain Information Description: IBM Jazz Reporting Service (JRS) 6.0.4 could allow an authenticated user to obtain information on another server that the current report builder interacts with. IBM X-Force ID: 126455. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101880 - https://exchange.xforce.ibmcloud.com/vulnerabilities/126455 - http://www.ibm.com/support/docview.wss?uid=swg22009973
CVE ID: CVE-2017-1341 State: PUBLISHED Published: 2017-12-07T15:00:00Z Last Updated: 2024-09-16T18:45:12.994Z Vendors: IBM Products: MQ Problem Types: Bypass Security Description: IBM WebSphere MQ 8.0 and 9.0 could allow, under special circumstances, an unauthorized user to access an object which they should have been denied access. IBM X-Force ID: 126456. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/126456 - http://www.ibm.com/support/docview.wss?uid=swg22005400 - http://www.securityfocus.com/bid/102042
CVE ID: CVE-2017-1342 State: PUBLISHED Published: 2017-12-07T15:00:00Z Last Updated: 2024-09-17T02:05:46.768Z Vendors: IBM Products: Insights Foundation for Energy Problem Types: Obtain Information Description: IBM Insights Foundation for Energy 2.0 could reveal sensitive information in error messages to authenticated users that could e used to conduct further attacks. IBM X-Force ID: 126457. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22009039 - https://exchange.xforce.ibmcloud.com/vulnerabilities/126457
CVE ID: CVE-2017-1345 State: PUBLISHED Published: 2017-10-02T20:00:00Z Last Updated: 2024-09-17T03:27:39.573Z Vendors: IBM Products: Insights Foundation for Energy Problem Types: Cross-Site Scripting Description: IBM Insights Foundation for Energy 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126460. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22009039 - https://exchange.xforce.ibmcloud.com/vulnerabilities/126460
CVE ID: CVE-2017-1346 State: PUBLISHED Published: 2017-09-25T16:00:00 Last Updated: 2024-08-05T13:32:29.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Business Process Manager 7.5, 8.0, and 8.5 temporarily stores files in a temporary folder during offline installs which could be read by a local user within a short timespan. IBM X-Force ID: 126461. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22004654 - http://www.securityfocus.com/bid/100964 - https://exchange.xforce.ibmcloud.com/vulnerabilities/126461
CVE ID: CVE-2017-1347 State: PUBLISHED Published: 2017-06-23T16:00:00 Last Updated: 2024-08-05T13:32:29.556Z Vendors: IBM Products: Sterling B2B Integrator Problem Types: Data Manipulation Description: IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 126462. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99231 - http://www.ibm.com/support/docview.wss?uid=swg22004199 - https://exchange.xforce.ibmcloud.com/vulnerabilities/126462
CVE ID: CVE-2017-1348 State: PUBLISHED Published: 2017-06-23T16:00:00 Last Updated: 2024-08-05T13:32:29.955Z Vendors: IBM Products: Sterling B2B Integrator Problem Types: Cross-Site Scripting Description: IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126524. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99245 - http://www.ibm.com/support/docview.wss?uid=swg22004199 - https://exchange.xforce.ib
://www.securityfocus.com/bid/99245 - http://www.ibm.com/support/docview.wss?uid=swg22004199 - https://exchange.xforce.ibmcloud.com/vulnerabilities/126524
CVE ID: CVE-2017-1349 State: PUBLISHED Published: 2017-06-23T16:00:00 Last Updated: 2024-08-05T13:32:29.703Z Vendors: IBM Products: Sterling B2B Integrator Problem Types: Obtain Information Description: IBM Sterling B2B Integrator Standard Edition 5.2 stores potentially sensitive information from HTTP sessions that could be read by a local user. IBM X-Force ID: 126525. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/126525 - http://www.securityfocus.com/bid/99236 - http://www.ibm.com/support/docview.wss?uid=swg22004209
CVE ID: CVE-2017-1350 State: PUBLISHED Published: 2018-06-05T15:00:00Z Last Updated: 2024-09-17T04:29:22.425Z Severity: HIGH (CVSS 8.4 CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: InfoSphere Information Server Problem Types: Gain Privileges Description: IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 could allow a user to escalate their privileges to administrator due to improper access controls. IBM X-Force ID: 126526. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104550 - https://exchange.xforce.ibmcloud.com/vulnerabilities/126526 - http://www.securitytracker.com/id/1041042 - http://www.ib
https://exchange.xforce.ibmcloud.com/vulnerabilities/126526 - http://www.securitytracker.com/id/1041042 - http://www.ibm.com/support/docview.wss?uid=swg22005503
CVE ID: CVE-2017-1352 State: PUBLISHED Published: 2017-09-12T21:00:00Z Last Updated: 2024-09-16T17:08:59.295Z Vendors: IBM Products: Maximo Asset Management Problem Types: Gain Privileges Description: IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to inject commands into work orders that could be executed by another user that downloads the affected file. IBM X-Force ID: 126538. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22006650 - http://www.securityfocus.com/bid/100697 - https://exchange.xforce.ibmcloud.com/vulnerabilities/126538
CVE ID: CVE-2017-1353 State: PUBLISHED Published: 2017-12-07T15:00:00Z Last Updated: 2024-09-17T01:06:59.874Z Vendors: IBM Products: Atlas eDiscovery Process Management Problem Types: Obtain Information Description: IBM Atlas eDiscovery Process Management 6.0.3 could allow an authenticated attacker to obtain sensitive information when an unsuspecting user clicks on unsafe third-party links. IBM X-Force ID: 126680. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=swg22005827 - https://exchange.xforce.ibmcloud.com/vulnerabilities/126680
CVE ID: CVE-2017-1354 State: PUBLISHED Published: 2017-12-07T15:00:00Z Last Updated: 2024-09-17T01:07:00.490Z Vendors: IBM Products: Atlas eDiscovery Process Management Problem Types: Cross-Site Scripting Description: IBM Atlas eDiscovery Process Management 6.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126681. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/126681 - https://www.ibm.com/support/docview.wss?uid=swg22005
es: - https://exchange.xforce.ibmcloud.com/vulnerabilities/126681 - https://www.ibm.com/support/docview.wss?uid=swg22005828
CVE ID: CVE-2017-1355 State: PUBLISHED Published: 2017-12-07T15:00:00Z Last Updated: 2024-09-17T03:03:01.088Z Vendors: IBM Products: Atlas eDiscovery Process Management Problem Types: Obtain Information Description: IBM Atlas eDiscovery Process Management 6.0.3 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 126682. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/126682 - https://www.ibm.com/support/docview.wss?uid=swg22005836 - http://www.securityfocus.com/bid/102016
CVE ID: CVE-2017-1356 State: PUBLISHED Published: 2017-12-07T15:00:00Z Last Updated: 2024-09-16T16:33:08.278Z Vendors: IBM Products: Atlas eDiscovery Process Management Problem Types: Data Manipulation Description: IBM Atlas eDiscovery Process Management 6.0.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 126683. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=swg22005835 - http://www.securityfocus.com/bid/102033 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12
.wss?uid=swg22005835 - http://www.securityfocus.com/bid/102033 - https://exchange.xforce.ibmcloud.com/vulnerabilities/126683
CVE ID: CVE-2017-1357 State: PUBLISHED Published: 2017-08-09T18:00:00Z Last Updated: 2024-09-16T23:00:52.819Z Vendors: IBM Products: Maximo Asset Management Problem Types: File Manipulation Description: IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to manipulate work orders to forge emails which could be used to conduct further advanced attacks. IBM X-Force ID: 126684. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100214 - https://exchange.xforce.ibmcloud.com/vulnerabilities/126684 - http://www.ibm.com/support/docview.wss?uid=swg22006647
CVE ID: CVE-2017-1359 State: PUBLISHED Published: 2017-10-02T20:00:00Z Last Updated: 2024-09-17T01:51:16.793Z Vendors: IBM Products: Rational Engineering Lifecycle Manager Problem Types: Cross-Site Scripting Description: IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126686. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/126686 - http://www.ibm.com/support/docview.wss?uid=swg22008785 - http://www.
change.xforce.ibmcloud.com/vulnerabilities/126686 - http://www.ibm.com/support/docview.wss?uid=swg22008785 - http://www.securityfocus.com/bid/101062
CVE ID: CVE-2017-1362 State: PUBLISHED Published: 2017-09-25T16:00:00Z Last Updated: 2024-09-16T19:25:29.201Z Vendors: IBM Products: Security Identity Manager Problem Types: Obtain Information Description: IBM Security Identity Manager Adapters 6.0 and 7.0 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 126801. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100965 - https://exchange.xforce.ibmcloud.com/vulnerabilities/126801 - http://www.ibm.com/support/docview.wss?uid=swg22007381
CVE ID: CVE-2017-1363 State: PUBLISHED Published: 2017-10-25T12:00:00 Last Updated: 2024-08-05T13:32:29.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Team Concert (RTC) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126856. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101587 - http://www.ibm.com/support/docview.wss?uid=swg22009296 - https://exchange.xforce.ibmcloud.com/vulnerabilities/126856
CVE ID: CVE-2017-1364 State: PUBLISHED Published: 2017-10-02T20:00:00Z Last Updated: 2024-09-17T01:26:34.699Z Vendors: IBM Products: Rational Engineering Lifecycle Manager Problem Types: Cross-Site Scripting Description: IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126857. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/126857 - http://www.ibm.com/support/docview.wss?uid=swg22008785 - http://www.
change.xforce.ibmcloud.com/vulnerabilities/126857 - http://www.ibm.com/support/docview.wss?uid=swg22008785 - http://www.securityfocus.com/bid/101062
CVE ID: CVE-2017-1365 State: PUBLISHED Published: 2017-12-27T16:00:00Z Last Updated: 2024-09-16T17:54:32.885Z Vendors: IBM Products: Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Team Concert (RTC including IBM Rational Collaborative Lifecycle Management 4.0, 5.0., and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-force ID: 126858. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg220118
8. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22011815 - https://exchange.xforce.ibmcloud.com/vulnerabilities/126858
CVE ID: CVE-2017-1366 State: PUBLISHED Published: 2018-08-06T14:00:00Z Last Updated: 2024-09-17T01:45:38.327Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/A:N/AC:H/AV:N/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Obtain Information Description: IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 126859. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22016869 - https://exchange.xforce.ibmcloud.com/vulnerabilit
References: - http://www.ibm.com/support/docview.wss?uid=swg22016869 - https://exchange.xforce.ibmcloud.com/vulnerabilities/126859
CVE ID: CVE-2017-1367 State: PUBLISHED Published: 2018-07-13T16:00:00Z Last Updated: 2024-09-17T01:11:26.200Z Severity: LOW (CVSS 3.7 CVSS:3.0/A:N/AC:H/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Obtain Information Description: IBM Security Identity Governance and Intelligence Virtual Appliance 5.2 through 5.2.3.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 126860. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.
story. IBM X-Force ID: 126860. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/126860 - http://www.ibm.com/support/docview.wss?uid=swg22016869
CVE ID: CVE-2017-1368 State: PUBLISHED Published: 2018-08-06T14:00:00Z Last Updated: 2024-09-17T00:51:09.335Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Security Identity Governance and Intelligence Problem Types: Obtain Information Description: IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snoo
the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 126861. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/126861 - http://www.ibm.com/support/docview.wss?uid=swg22016869
CVE ID: CVE-2017-1369 State: PUBLISHED Published: 2017-10-02T20:00:00Z Last Updated: 2024-09-17T03:49:01.094Z Vendors: IBM Products: Rational Engineering Lifecycle Manager Problem Types: Cross-Site Scripting Description: IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126862. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22008785 - https://exchange.xforce.ibmcloud.com/vulnerabilities/126862 - http://www.
.ibm.com/support/docview.wss?uid=swg22008785 - https://exchange.xforce.ibmcloud.com/vulnerabilities/126862 - http://www.securityfocus.com/bid/101062
CVE ID: CVE-2017-1370 State: PUBLISHED Published: 2017-07-31T21:00:00Z Last Updated: 2024-09-17T01:17:02.654Z Vendors: IBM Products: Jazz Reporting Service Problem Types: Obtain Information Description: IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could disclose sensitive information, including user credentials, through an error message from the Report Builder administrator configuration page. IBM X-Force ID: 126863. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99954 - http://www.ibm.com/support/docview.wss?uid=swg22005868 - https://exchange.xforce.ibmcloud.com/vulnerabilities/126863
CVE ID: CVE-2017-1371 State: PUBLISHED Published: 2017-07-21T20:00:00Z Last Updated: 2024-09-16T22:36:37.244Z Vendors: IBM Products: TRIRIGA Application Platform Problem Types: Gain Privileges Description: Builder tools running in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 contains a vulnerability that could allow an authenticated user to execute Builder tool actions they do not have access to. IBM X-Force ID: 126864. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/126864 - http://www.ibm.com/support/docview.wss?uid=swg22004674
CVE ID: CVE-2017-1372 State: PUBLISHED Published: 2017-07-21T20:00:00Z Last Updated: 2024-09-16T19:10:46.220Z Vendors: IBM Products: TRIRIGA Application Platform Problem Types: Cross-Site Scripting Description: IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126865. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22004675 - https://exchange.xforce.ibmcloud.com/vulnerabilities/126865
CVE ID: CVE-2017-1373 State: PUBLISHED Published: 2017-07-21T20:00:00Z Last Updated: 2024-09-16T16:54:03.255Z Vendors: IBM Products: TRIRIGA Application Platform Problem Types: Gain Privileges Description: Reports executed in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 contains a vulnerability that could allow an authenticated user to execute a report they do not have access to. IBM X-Force ID: 126866. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99908 - https://exchange.xforce.ibmcloud.com/vulnerabilities/126866 - http://www.ibm.com/support/docview.wss?uid=swg22004677
CVE ID: CVE-2017-1374 State: PUBLISHED Published: 2017-07-21T20:00:00Z Last Updated: 2024-09-16T22:15:47.805Z Vendors: IBM Products: TRIRIGA Application Platform Problem Types: Obtain Information Description: Sensitive data can be exposed in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 that can lead to an attacker gaining unauthorized access to the system. IBM X-Force ID: 126867. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/126867 - http://www.ibm.com/support/docview.wss?uid=swg22004681
CVE ID: CVE-2017-1375 State: PUBLISHED Published: 2017-10-24T21:00:00 Last Updated: 2024-08-05T13:32:30.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM System Storage Storwize V7000 Unified (V7000U) 1.5 and 1.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 126868. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/126868 - http://www.securityfocus.com/bid/101561 - http://www.ibm.com/support/docview.wss?uid=ssg1S1010657
CVE ID: CVE-2017-1376 State: PUBLISHED Published: 2017-08-28T20:00:00Z Last Updated: 2024-09-16T17:54:40.460Z Vendors: IBM Products: Operations Analytics Predictive Insights Problem Types: Gain Access Description: A flaw in the IBM J9 VM class verifier allows untrusted code to disable the security manager and elevate its privileges. IBM X-Force ID: 126873. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/126873 - https://access.redhat.com/errata/RHSA-2017:2481 - https://access.redhat.com/errata/RHSA-2017:2469 - http://www.ibm.com/support/docview.wss?uid=swg22007305&myns=swgtiv&mynp=OCSSJQQ3&mync=E&cm_sp=swgtiv-_-OCSSJQQ3-_-
469 - http://www.ibm.com/support/docview.wss?uid=swg22007305&myns=swgtiv&mynp=OCSSJQQ3&mync=E&cm_sp=swgtiv-_-OCSSJQQ3-_-E
CVE ID: CVE-2017-1377 State: PUBLISHED Published: 2017-08-10T15:00:00Z Last Updated: 2024-09-16T17:23:02.396Z Vendors: IBM Products: Runbook Automation Problem Types: Obtain Information Description: IBM Runbook Automation reveals sensitive information in error messages that could be used in further attacks against the system. IBM X-Force ID: 126874. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22007031 - https://exchange.xforce.ibmcloud.com/vulnerabilities/126874 - http://www.securityfocus.com/bid/100247
CVE ID: CVE-2017-1378 State: PUBLISHED Published: 2017-10-05T17:00:00Z Last Updated: 2024-09-17T01:46:09.210Z Vendors: IBM Products: Spectrum Protect for Virtual Environments Problem Types: Obtain Information Description: IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) disclosed unencrypted login credentials to Vmware vCenter in the application trace output which could be obtained by a local user. IBM X-Force ID: 126875. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/126875 - http://www.ibm.com/support/docview.wss?uid=swg22006215
CVE ID: CVE-2017-1379 State: PUBLISHED Published: 2017-06-15T13:00:00 Last Updated: 2024-08-05T13:32:29.458Z Vendors: IBM Products: API Connect Problem Types: Obtain Information Description: IBM API Connect 5.0.0.0 could allow a remote attacker to obtain sensitive information, caused by improper handling of requests to the Developer Portal. IBM X-Force ID: 127002. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99063 - https://exchange.xforce.ibmcloud.com/vulnerabilities/127002 - http://www.ibm.com/support/docview.wss?uid=swg22004714