CVE-2017-1116

IBM Campaign 8.6, 9.0, 9.1, 9.1.1, 9.1.2, and 10.0 contains excessive details on the client side which could provide information useful for an authenticated user to conduct other attacks. IBM X-Force ID: 121154.

CVSS v3 4.3 MEDIUM
CVSS v2.0 4.0 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector : AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

4.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.ibm.com/support/docview.wss?uid=swg22015569	Patch Vendor Advisory
http://www.securityfocus.com/bid/104011	Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/121154	VDB Entry Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:campaign:8.6:::::::*
	cpe:2.3:a:ibm:campaign:9.0:::::::*
	cpe:2.3:a:ibm:campaign:9.1:::::::*
	cpe:2.3:a:ibm:campaign:9.1.1:::::::*
	cpe:2.3:a:ibm:campaign:9.1.2:::::::*
	cpe:2.3:a:ibm:campaign:10.0:::::::*

History

No history.

Information

Published : 2018-04-27 15:29

Updated : 2024-02-04 19:46

NVD link : CVE-2017-1116

Mitre link : CVE-2017-1116

CVE.ORG link : CVE-2017-1116

JSON object : View

Products Affected

ibm

campaign

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2017-1116", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "published": "2018-04-27T15:29:00.247", "references": [{"url": "http://www.ibm.com/support/docview.wss?uid=swg22015569", "tags": ["Patch", "Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "http://www.securityfocus.com/bid/104011", "tags": ["Third Party Advisory", "VDB Entry"], "source": "psirt@us.ibm.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/121154", "tags": ["VDB Entry", "Vendor Advisory"], "source": "psirt@us.ibm.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "IBM Campaign 8.6, 9.0, 9.1, 9.1.1, 9.1.2, and 10.0 contains excessive details on the client side which could provide information useful for an authenticated user to conduct other attacks. IBM X-Force ID: 121154."}, {"lang": "es", "value": "IBM Campaign 8.6, 9.0, 9.1, 9.1.1, 9.1.2 y 10.0 contiene demasiados detalles del lado del cliente, lo que podr\u00eda proporcionar informaci\u00f3n \u00fatil para que un usuario autenticado lleve a cabo otros ataques. IBM X-Force ID: 121154."}], "lastModified": "2018-05-25T18:45:20.707", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:campaign:8.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8CCF7E4A-B159-45CA-A3F6-C6D26B2AF08C"}, {"criteria": "cpe:2.3:a:ibm:campaign:9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6B312534-625C-4AE1-9B32-29245C231175"}, {"criteria": "cpe:2.3:a:ibm:campaign:9.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8511BB84-F922-496D-B508-C4116599FCC2"}, {"criteria": "cpe:2.3:a:ibm:campaign:9.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9C3D9E35-1594-4D84-AF18-170D20960D99"}, {"criteria": "cpe:2.3:a:ibm:campaign:9.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C4C2D913-808F-4705-8AD5-17157FA833C0"}, {"criteria": "cpe:2.3:a:ibm:campaign:10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6BB3F73F-3C2B-4C1B-B81E-99B5384DE43A"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}