CVE-2015-0172 — Sensitive Information Exposure in IBM Security Siteprotector System

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.2%
top 59.38%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Security Siteprotector System
Timeline
PublishedApr 10
Latest updateMay 14

Description

IBM Security SiteProtector System 3.0, 3.1.0 and 3.1.1 allows remote attackers to bypass intended security restrictions and consequently execute unspecified commands and obtain sensitive information via unknown vectors. IBM X-Force ID: 100927.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

▶NVDibm/security_siteprotector_system3.0, 3.1.0.0, 3.1.1.0+2

🔴Vulnerability Details

2
GHSA
GHSA-fg37-7xp8-q753: IBM Security SiteProtector System 3↗2022-05-14
▶
CVEList
CVE-2015-0172: IBM Security SiteProtector System 3↗2018-04-10
▶
CVE-2015-0172 — Sensitive Information Exposure in IBM | cvebase