deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-4995
Published: 2017-11-27
Description: An issue was discovered in Pivotal Spring Security 4.2.0.RELEASE through 4.2.2.RELEASE, and Spring Security 5.0.0.M1. When configured to enable default typing, Jackson contained a deserialization vulnerability that could lead to arbitrary code execution. Jackson fixed this vulnerability by blacklisting known "deserialization gadgets." Spring Security configures Jackson with global default typing enabled, which means that (through the previous exploit) arbitrary code could be executed if all of the following is true: (1) Spring Security's Jackson support is being leveraged by invoking SecurityJackson2Modules.getModules(ClassLoader) or SecurityJackson2Modules.enableDefaultTyping(ObjectMapper); (2) Jackson is used to deserialize data that is not trusted (Spring Security does not perform deserialization using Jackson, so this is an explicit choice of the user); and (3) there is an unknown (Jackson is not blacklisting it already) "deserialization gadget" that allows code execution present on the classpath. Jackson provides a blacklisting approach to protecting against this type of attack, but Spring Security should be proactive against blocking unknown "deserialization gadgets" when Spring Security enables default typing.
CVSS Score: 8.1 (HIGH)
CWE: CWE-502
References: http://www.securityfocus.com/bid/99080; https://lists.apache.org/thread.html/4641ed8616ccc2c1fbddac2c3dc9900c96387bc226eaf0232d61909b%40%3Ccommits.cassandra.apache.org%3E; https://lists.apache.org/thread.html/r42ac3e39e6265db12d9fc6ae1cd4b5fea7aed9830dc6f6d58228fed7%40%3Ccommits.cassandra.apache.org%3E
CVE: CVE-2017-8028
Published: 2017-11-27
Description: In Pivotal Spring-LDAP versions 1.3.0 - 2.3.1, when connected to some LDAP servers, when no additional attributes are bound, and when using LDAP BindAuthenticator with org.springframework.ldap.core.support.DefaultTlsDirContextAuthenticationStrategy as the authentication strategy, and setting userSearch, authentication is allowed with an arbitrary password when the username is correct. This occurs because some LDAP vendors require an explicit operation for the LDAP bind to take effect.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: https://access.redhat.com/errata/RHSA-2018:0319; https://lists.debian.org/debian-lts-announce/2017/11/msg00026.html; https://pivotal.io/security/cve-2017-8028
CVE: CVE-2017-8031
Published: 2017-11-27
Description: An issue was discovered in Cloud Foundry Foundation cf-release (all versions prior to v279) and UAA (30.x versions prior to 30.6, 45.x versions prior to 45.4, 52.x versions prior to 52.1). In some cases, the UAA allows an authenticated user for a particular client to revoke client tokens for other users on the same client. This occurs only if the client is using opaque tokens or JWT tokens validated using the check_token endpoint. A malicious actor could cause denial of service.
CVSS Score: 5.3 (MEDIUM)
References: http://www.securityfocus.com/bid/101967; https://www.cloudfoundry.org/cve-2017-8031/; http://www.securityfocus.com/bid/101967
CVE: CVE-2017-8038
Published: 2017-11-27
Description: In Cloud Foundry Foundation Credhub-release version 1.1.0, access control lists (ACLs) enforce whether an authenticated user can perform an operation on a credential. For installations using ACLs, the ACL was bypassed for the CredHub interpolate endpoint, allowing authenticated applications to view any credential within the CredHub installation.
CVSS Score: 8.8 (HIGH)
References: https://www.cloudfoundry.org/cve-2017-8038/; https://www.cloudfoundry.org/cve-2017-8038/
CVE: CVE-2017-8039
Published: 2017-11-27
Description: An issue was discovered in Pivotal Spring Web Flow through 2.4.5. Applications that do not change the value of the MvcViewFactoryCreator useSpringBinding property which is disabled by default (i.e., set to 'false') can be vulnerable to malicious EL expressions in view states that process form submissions but do not have a sub-element to declare explicit data binding property mappings. NOTE: this issue exists because of an incomplete fix for CVE-2017-4971.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-1188
References: http://www.securityfocus.com/bid/100849; https://pivotal.io/security/cve-2017-8039; http://www.securityfocus.com/bid/100849
CVE: CVE-2017-8044
Published: 2017-11-27
Description: In Pivotal Single Sign-On for PCF (1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3), certain pages allow code to be injected into the DOM environment through query parameters, leading to XSS attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/100618; https://pivotal.io/security/cve-2017-8044; http://www.securityfocus.com/bid/100618
CVE: CVE-2017-8045
Published: 2017-11-27
Description: In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsafely deserialized when being converted into a string. A malicious payload could be crafted to exploit this and enable a remote code execution attack.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://www.securityfocus.com/bid/100936; https://pivotal.io/security/cve-2017-8045; http://www.securityfocus.com/bid/100936
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-27
Description: GitPHP by xiphux is vulnerable to OS Command Injections
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/Enalean/gitphp/commit/160621785ee812d6d90e20878bd6175e42c13c94; https://github.com/xiphux/gitphp/pull/37; https://github.com/Enalean/gitphp/commit/160621785ee812d6d90e20878bd6175e42c13c94
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-27
Description: math.js before 3.17.0 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://github.com/josdejong/mathjs/blob/master/HISTORY.md#2017-11-18-version-3170; https://github.com/josdejong/mathjs/commit/8d2d48d81b3c233fb64eb2ec1d7a9e1cf6a55a90; https://github.com/josdejong/mathjs/blob/master/HISTORY.md#2017-11-18-version-3170
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-27
Description: math.js before 3.17.0 had an issue where private properties such as a constructor could be replaced by using unicode characters when creating an object.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-88, CWE-20
References: https://github.com/josdejong/mathjs/blob/master/HISTORY.md#2017-11-18-version-3170; https://github.com/josdejong/mathjs/commit/a60f3c8d9dd714244aed7a5569c3dccaa3a4e761; https://github.com/josdejong/mathjs/blob/master/HISTORY.md#2017-11-18-version-3170
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-27
Description: typed-function before 0.10.6 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-20
References: https://github.com/josdejong/typed-function/blob/master/HISTORY.md#2017-11-18-version-0106; https://github.com/josdejong/typed-function/commit/6478ef4f2c3f3c2d9f2c820e2db4b4ba3425e6fe; https://github.com/josdejong/typed-function/blob/master/HISTORY.md#2017-11-18-version-0106
CVE: CVE-2017-15100
Published: 2017-11-27
Description: An attacker submitting facts to the Foreman server containing HTML can cause a stored XSS on certain pages: (1) Facts page, when clicking on the "chart" button and hovering over the chart; (2) Trends page, when checking the graph for a trend based on a such fact; (3) Statistics page, for facts that are aggregated on this page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://projects.theforeman.org/issues/21519; https://access.redhat.com/errata/RHSA-2018:2927; https://github.com/theforeman/foreman/pull/4967
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-27
Description: Command injection in evince via filename when printing to PDF. This affects versions earlier than 3.25.91.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://bugzilla.gnome.org/show_bug.cgi?id=784947; https://lists.debian.org/debian-lts-announce/2017/12/msg00006.html; https://lists.debian.org/debian-lts-announce/2019/08/msg00013.html
CVE: CVE-2[PII_REDACTED]
Published: 2017-11-27
Description: A vulnerability in Swagger-Parser's version <= 1.0.30 and Swagger codegen version <= 2.2.2 yaml parsing functionality results in arbitrary code being executed when a maliciously crafted yaml Open-API specification is parsed. This in particular, affects the 'generate' and 'validate' command in swagger-codegen (<= 2.2.2) and can lead to arbitrary code being executed when these commands are used on a well-crafted yaml specification.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://github.com/swagger-api/swagger-parser/pull/481; https://lgtm.com/blog/swagger_snakeyaml_CVE-2[PII_REDACTED]_CVE-2[PII_REDACTED]; https://github.com/swagger-api/swagger-parser/pull/481
CVE: CVE-2017-0910
Published: 2017-11-27
Description: In Zulip Server before 1.7.1, on a server with multiple realms, a vulnerability in the invitation system lets an authorized user of one realm on the server create a user account on any other realm.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863, CWE-287
References: http://blog.zulip.org/2017/11/23/zulip-1-7-1-released/; https://github.com/zulip/zulip/commit/960d736e55cbb9386a68e4ee45f80581fd2a4e32; http://blog.zulip.org/2017/11/23/zulip-1-7-1-released/
CVE: CVE-2017-14585
Published: 2017-11-27
Description: A Server Side Request Forgery (SSRF) vulnerability could lead to remote code execution for authenticated administrators. This issue was introduced in version 2.2.0 of Hipchat Server and version 3.0.0 of Hipchat Data Center. Versions of Hipchat Server starting with 2.2.0 and before 2.2.6 are affected by this vulnerability. Versions of Hipchat Data Center starting with 3.0.0 and before 3.1.0 are affected.
CVSS Score: 7.2 (HIGH)
CWE: CWE-918
References: http://www.securityfocus.com/bid/101945; https://confluence.atlassian.com/hc/hipchat-server-security-advisory-2017-11-22-939946293.html; https://jira.atlassian.com/browse/HCPUB-3526
CVE: CVE-2017-14586
Published: 2017-11-27
Description: The Hipchat for Mac desktop client is vulnerable to client-side remote code execution via video call link parsing. Hipchat for Mac desktop clients at or above version 4.0 and before version 4.30 are affected by this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101947; https://confluence.atlassian.com/hc/hipchat-server-security-advisory-2017-11-22-939946293.html; https://jira.atlassian.com/browse/HCPUB-3473
CVE: CVE-2017-15114
Published: 2017-11-27
Description: When libvirtd is configured by OSP director (tripleo-heat-templates) to use the TLS transport it defaults to the same certificate authority as all non-libvirtd services. As no additional authentication is configured this allows these services to connect to libvirtd (which is equivalent to root access). If a vulnerability exists in another service it could, combined with this flaw, be exploited to escalate privileges to gain control over compute nodes.
CVSS Score: 8.1 (HIGH)
CWE: CWE-295
References: http://www.securityfocus.com/bid/101971; https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=994922a8ba996fe68d047df0e1486fa805dbea31; http://www.securityfocus.com/bid/101971
CVE: CVE-2017-15117
Published: 2017-11-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2017-9316
Published: 2017-11-27
Description: Firmware upgrade authentication bypass vulnerability was found in Dahua IPC-HDW4300S and some IP products. The vulnerability was caused by internal Debug function. This particular function was used for problem analysis and performance tuning during product development phase. It allowed the device to receive only specific data (one direction, no transmit) and therefore it was not involved in any instance of collecting user privacy data or allowing remote code execution.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287
References: http://www.dahuasecurity.com/annoucementsingle/security-advisory--high-risk-vulnerability-found-in-dahua-ipc-hdw4300s-and-some-ip-products_14731_231.html; http://www.dahuasecurity.com/annoucementsingle/security-advisory--high-risk-vulnerability-found-in-dahua-ipc-hdw4300s-and-some-ip-products_14731_231.html
CVE: CVE-2017-15051
Published: 2017-11-27
Description: Multiple stored cross-site scripting (XSS) vulnerabilities in TeamPass before 2.1.27.9 allow authenticated remote attackers to inject arbitrary web script or HTML via the (1) URL value of an item or (2) user log history. To exploit the vulnerability, the attacker must be first authenticated to the application. For the first one, the attacker has to simply inject XSS code within the URL field of a shared item. For the second one however, the attacker must prepare a payload within its profile, and then ask an administrator to modify its profile. From there, whenever the administrator accesses the log, it can be XSS'ed.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://blog.amossys.fr/teampass-multiple-cve-01.html; https://github.com/nilsteampassnet/TeamPass/commit/5f16f6bb132138ee04eb1e0debf2bdc7d7b7a15f; http://blog.amossys.fr/teampass-multiple-cve-01.html
CVE: CVE-2017-15052
Published: 2017-11-27
Description: TeamPass before 2.1.27.9 does not properly enforce manager access control when requesting users.queries.php. It is then possible for a manager user to delete an arbitrary user (including admin), or modify attributes of any arbitrary user except administrator. To exploit the vulnerability, an authenticated attacker must have the manager rights on the application, then tamper with the requests sent directly, for example by changing the "id" parameter when invoking "delete_user" on users.queries.php.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-269
References: http://blog.amossys.fr/teampass-multiple-cve-01.html; https://github.com/nilsteampassnet/TeamPass/commit/8f2d51dd6c24f76e4f259d0df22cff9b275f2dd1; http://blog.amossys.fr/teampass-multiple-cve-01.html
CVE: CVE-2017-15053
Published: 2017-11-27
Description: TeamPass before 2.1.27.9 does not properly enforce manager access control when requesting roles.queries.php. It is then possible for a manager user to modify any arbitrary roles within the application, or delete any arbitrary role. To exploit the vulnerability, an authenticated attacker must have the manager rights on the application, then tamper with the requests sent directly, for example by changing the "id" parameter when invoking "delete_role" on roles.queries.php.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-269
References: http://blog.amossys.fr/teampass-multiple-cve-01.html; https://github.com/nilsteampassnet/TeamPass/commit/ef32e9c28b6ddc33cee8a25255bc8da54434af3e; http://blog.amossys.fr/teampass-multiple-cve-01.html
CVE: CVE-2017-15054
Published: 2017-11-27
Description: An arbitrary file upload vulnerability, present in TeamPass before 2.1.27.9, allows remote authenticated users to upload arbitrary files leading to Remote Command Execution. To exploit this vulnerability, an authenticated attacker has to tamper with parameters of a request to upload.files.php, in order to select the correct branch and be able to upload any arbitrary file. From there, it can simply access the file to execute code on the server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: http://blog.amossys.fr/teampass-multiple-cve-01.html; https://github.com/nilsteampassnet/TeamPass/commit/9811c9d453da4bd1101ff7033250d1fbedf101fc; http://blog.amossys.fr/teampass-multiple-cve-01.html
CVE: CVE-2017-15055
Published: 2017-11-27
Description: TeamPass before 2.1.27.9 does not properly enforce item access control when requesting items.queries.php. It is then possible to copy any arbitrary item into a directory controlled by the attacker, edit any item within a read-only directory, delete an arbitrary item, delete the file attachments of an arbitrary item, copy the password of an arbitrary item to the copy/paste buffer, access the history of an arbitrary item, and edit attributes of an arbitrary directory. To exploit the vulnerability, an authenticated attacker must tamper with the requests sent directly, for example by changing the "item_id" parameter when invoking "copy_item" on items.queries.php.
CVSS Score: 8.1 (HIGH)
CWE: CWE-269
References: http://blog.amossys.fr/teampass-multiple-cve-01.html; https://github.com/nilsteampassnet/TeamPass/commit/5f16f6bb132138ee04eb1e0debf2bdc7d7b7a15f; http://blog.amossys.fr/teampass-multiple-cve-01.html
CVE: CVE-2017-16994
Published: 2017-11-27
Description: The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive information from uninitialized kernel memory via crafted use of the mincore() system call.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=373c4557d2aa362702c4c2d41288fb1e54990b7c; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.2; http://www.securityfocus.com/bid/101969
CVE: CVE-2016-6024
Published: 2017-11-27
Description: IBM Jazz technology based products might divulge information that might be useful in helping attackers through error messages. IBM X-Force ID: 116868.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22010512; https://exchange.xforce.ibmcloud.com/vulnerabilities/116868; http://www.ibm.com/support/docview.wss?uid=swg22010512
CVE: CVE-2017-1240
Published: 2017-11-27
Description: IBM Rhapsody DM products could reveal sensitive information in HTTP 500 Internal Server Error responses. IBM X-Force ID: 124359.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22010512; http://www.securityfocus.com/bid/101976; https://exchange.xforce.ibmcloud.com/vulnerabilities/124359
CVE: CVE-2017-1251
Published: 2017-11-27
Description: An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker. IBM X-Force ID: 124631.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22010682; https://exchange.xforce.ibmcloud.com/vulnerabilities/124631; http://www.ibm.com/support/docview.wss?uid=swg22010682
CVE: CVE-2017-1283
Published: 2017-11-27
Description: IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user to cause a shared memory leak by MQ applications using dynamic queues, which can lead to lack of resources for other MQ applications. IBM X-Force ID: 125144.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-772
References: http://www.ibm.com/support/docview.wss?uid=swg22003852; https://exchange.xforce.ibmcloud.com/vulnerabilities/125144; http://www.ibm.com/support/docview.wss?uid=swg22003852
CVE: CVE-2017-1461
Published: 2017-11-27
Description: IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128460.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22010321; http://www.securityfocus.com/bid/101895; https://exchange.xforce.ibmcloud.com/vulnerabilities/128460
CVE: CVE-2017-1484
Published: 2017-11-27
Description: IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 could allow an authenticated attacker to obtain information such as user personal data. IBM X-Force ID: 128622.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22010103; http://www.securityfocus.com/bid/101894; https://exchange.xforce.ibmcloud.com/vulnerabilities/128622
CVE: CVE-2017-1560
Published: 2017-11-27
Description: IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131759.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22010321; http://www.securityfocus.com/bid/101895; https://exchange.xforce.ibmcloud.com/vulnerabilities/131759
CVE: CVE-2017-1570
Published: 2017-11-27
Description: IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID: 131852.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22010512; http://www.securityfocus.com/bid/102020; https://exchange.xforce.ibmcloud.com/vulnerabilities/131852
CVE: CVE-2017-1593
Published: 2017-11-27
Description: IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132494.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22010321; http://www.securityfocus.com/bid/101895; https://exchange.xforce.ibmcloud.com/vulnerabilities/132494
CVE: CVE-2017-1607
Published: 2017-11-27
Description: IBM DOORS Next Generation (DNG/RRC) 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132927.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22010329; http://www.securityfocus.com/bid/101904; https://exchange.xforce.ibmcloud.com/vulnerabilities/132927
CVE: CVE-2017-1628
Published: 2017-11-27
Description: IBM Business Process Manager 8.6.0.0 allows authenticated users to stop and resume the Event Manager by calling a REST API with incorrect authorization checks.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: http://www.ibm.com/support/docview.wss?uid=swg22009496; http://www.securityfocus.com/bid/101900; http://www.securitytracker.com/id/1039777
CVE: CVE-2017-1650
Published: 2017-11-27
Description: IBM DOORS Next Generation (DNG/RRC) 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133260.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22010329; http://www.securityfocus.com/bid/101904; https://exchange.xforce.ibmcloud.com/vulnerabilities/133260
CVE: CVE-2017-1678
Published: 2017-11-27
Description: IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134000.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22010321; http://www.securityfocus.com/bid/101895; https://exchange.xforce.ibmcloud.com/vulnerabilities/134000
CVE: CVE-2017-1688
Published: 2017-11-27
Description: IBM DOORS Next Generation (DNG/RRC) 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134063.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22010329; http://www.securityfocus.com/bid/101904; https://exchange.xforce.ibmcloud.com/vulnerabilities/134063