CVE-2017-1124
published 2017-03-07CVE-2017-1124: IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local attacker to obtain sensitive information using HTTP Header Injection. IBM Reference #…
PriorityP48low2.9CVSS 3.0
AVLACHPRNUINSUCLINAN
EPSS
0.30%
21.6th percentile
IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local attacker to obtain sensitive information using HTTP Header Injection. IBM Reference #: 1998053.
Affected
69 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | maximo_asset_management | — | — |
| ibm | maximo_asset_management | — | — |
| ibm | maximo_asset_management | — | — |
| ibm | maximo_asset_management | — | — |
| ibm | maximo_asset_management | — | — |
| ibm | maximo_asset_management | — | — |
| ibm | maximo_asset_management | — | — |
| ibm | maximo_asset_management | — | — |
| ibm | maximo_asset_management | — | — |
| ibm | maximo_asset_management | — | — |
| ibm | maximo_asset_management | — | — |
| ibm | maximo_asset_management | — | — |
| ibm | maximo_asset_management | — | — |
| ibm | maximo_asset_management | — | — |
| ibm | maximo_asset_management | — | — |
| ibm | maximo_asset_management | — | — |
| ibm | maximo_asset_management | — | — |
| ibm | maximo_asset_management | — | — |
| ibm | maximo_asset_management | — | — |
| ibm | maximo_asset_management | — | — |
| ibm | maximo_asset_management | — | — |
| ibm | maximo_asset_management | — | — |
| ibm | maximo_asset_management | — | — |
| ibm | maximo_asset_management | — | — |
| ibm | maximo_asset_management | — | — |
CVSS provenance
nvdv3.02.9LOWCVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
nvdv2.01.9LOWAV:L/AC:M/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2017-5060 chromium-browser: url spoofing in omnibox
bugzilla·2017-04-20·CVSS 6.5
CVE-2017-5060 [MEDIUM] CVE-2017-5060 chromium-browser: url spoofing in omnibox
CVE-2017-5060 chromium-browser: url spoofing in omnibox
An url spoofing flaw was found in the Omnibox component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=683314
External References:
https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html
Discussion:
Created chromium tracking bugs for this issue:
Affects: fedora-all [bug 1443852]
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6 Supplementary
Via RHSA-2017:1124 https://access.redhat.com/errata/RHSA-2017:1124
Bugzilla
CVE-2017-5061 chromium-browser: url spoofing in omnibox
bugzilla·2017-04-20·CVSS 5.3
CVE-2017-5061 [MEDIUM] CVE-2017-5061 chromium-browser: url spoofing in omnibox
CVE-2017-5061 chromium-browser: url spoofing in omnibox
An url spoofing flaw was found in the Omnibox component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=672847
External References:
https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html
Discussion:
Created chromium tracking bugs for this issue:
Affects: fedora-all [bug 1443852]
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6 Supplementary
Via RHSA-2017:1124 https://access.redhat.com/errata/RHSA-2017:1124
Bugzilla
CVE-2017-5063 chromium-browser: heap overflow in skia
bugzilla·2017-04-20·CVSS 8.8
CVE-2017-5063 [HIGH] CVE-2017-5063 chromium-browser: heap overflow in skia
CVE-2017-5063 chromium-browser: heap overflow in skia
A heap overflow flaw was found in the Skia component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=700836
External References:
https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html
Discussion:
Created chromium tracking bugs for this issue:
Affects: fedora-all [bug 1443852]
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6 Supplementary
Via RHSA-2017:1124 https://access.redhat.com/errata/RHSA-2017:1124
Bugzilla
CVE-2017-5069 chromium-browser: cross-origin bypass in blink
bugzilla·2017-04-20·CVSS 6.1
CVE-2017-5069 [MEDIUM] CVE-2017-5069 chromium-browser: cross-origin bypass in blink
CVE-2017-5069 chromium-browser: cross-origin bypass in blink
A cross-origin bypass flaw was found in the Blink component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=691726
External References:
https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html
Discussion:
Created chromium tracking bugs for this issue:
Affects: fedora-all [bug 1443852]
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6 Supplementary
Via RHSA-2017:1124 https://access.redhat.com/errata/RHSA-2017:1124
Bugzilla
CVE-2017-5062 chromium-browser: use after free in chrome apps
bugzilla·2017-04-20·CVSS 8.8
CVE-2017-5062 [HIGH] CVE-2017-5062 chromium-browser: use after free in chrome apps
CVE-2017-5062 chromium-browser: use after free in chrome apps
An use after free flaw was found in the Chrome Apps component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=702896
External References:
https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html
Discussion:
Created chromium tracking bugs for this issue:
Affects: fedora-all [bug 1443852]
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6 Supplementary
Via RHSA-2017:1124 https://access.redhat.com/errata/RHSA-2017:1124
Bugzilla
CVE-2017-5064 chromium-browser: use after free in blink
bugzilla·2017-04-20·CVSS 8.8
CVE-2017-5064 [HIGH] CVE-2017-5064 chromium-browser: use after free in blink
CVE-2017-5064 chromium-browser: use after free in blink
An use after free flaw was found in the Blink component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=693974
External References:
https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html
Discussion:
Created chromium tracking bugs for this issue:
Affects: fedora-all [bug 1443852]
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6 Supplementary
Via RHSA-2017:1124 https://access.redhat.com/errata/RHSA-2017:1124
Bugzilla
CVE-2017-5066 chromium-browser: incorrect signature handing in networking
bugzilla·2017-04-20·CVSS 6.5
CVE-2017-5066 [MEDIUM] CVE-2017-5066 chromium-browser: incorrect signature handing in networking
CVE-2017-5066 chromium-browser: incorrect signature handing in networking
An incorrect signature handing flaw was found in the Networking component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=690821
External References:
https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html
Discussion:
Created chromium tracking bugs for this issue:
Affects: fedora-all [bug 1443852]
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6 Supplementary
Via RHSA-2017:1124 https://access.redhat.com/errata/RHSA-2017:1124
Bugzilla
CVE-2017-5057 chromium-browser: type confusion in pdfium
bugzilla·2017-04-20·CVSS 8.8
CVE-2017-5057 [HIGH] CVE-2017-5057 chromium-browser: type confusion in pdfium
CVE-2017-5057 chromium-browser: type confusion in pdfium
A type confusion flaw was found in the PDFium component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=695826
External References:
https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html
Discussion:
Created chromium tracking bugs for this issue:
Affects: fedora-all [bug 1443852]
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6 Supplementary
Via RHSA-2017:1124 https://access.redhat.com/errata/RHSA-2017:1124
Bugzilla
CVE-2017-5059 chromium-browser: type confusion in blink
bugzilla·2017-04-20·CVSS 8.8
CVE-2017-5059 [HIGH] CVE-2017-5059 chromium-browser: type confusion in blink
CVE-2017-5059 chromium-browser: type confusion in blink
A type confusion flaw was found in the Blink component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=684684
External References:
https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html
Discussion:
Created chromium tracking bugs for this issue:
Affects: fedora-all [bug 1443852]
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6 Supplementary
Via RHSA-2017:1124 https://access.redhat.com/errata/RHSA-2017:1124
Bugzilla
CVE-2017-5067 chromium-browser: url spoofing in omnibox
bugzilla·2017-04-20·CVSS 6.5
CVE-2017-5067 [MEDIUM] CVE-2017-5067 chromium-browser: url spoofing in omnibox
CVE-2017-5067 chromium-browser: url spoofing in omnibox
An url spoofing flaw was found in the Omnibox component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=648117
External References:
https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html
Discussion:
Created chromium tracking bugs for this issue:
Affects: fedora-all [bug 1443852]
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6 Supplementary
Via RHSA-2017:1124 https://access.redhat.com/errata/RHSA-2017:1124
Bugzilla
CVE-2017-5058 chromium-browser: heap use after free in print preview
bugzilla·2017-04-20·CVSS 8.8
CVE-2017-5058 [HIGH] CVE-2017-5058 chromium-browser: heap use after free in print preview
CVE-2017-5058 chromium-browser: heap use after free in print preview
A heap use after free flaw was found in the Print Preview component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=694382
External References:
https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html
Discussion:
Created chromium tracking bugs for this issue:
Affects: fedora-all [bug 1443852]
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6 Supplementary
Via RHSA-2017:1124 https://access.redhat.com/errata/RHSA-2017:1124
Bugzilla
CVE-2017-5065 chromium-browser: incorrect ui in blink
bugzilla·2017-04-20·CVSS 4.7
CVE-2017-5065 [MEDIUM] CVE-2017-5065 chromium-browser: incorrect ui in blink
CVE-2017-5065 chromium-browser: incorrect ui in blink
An incorrect ui flaw was found in the Blink component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=704560
External References:
https://chromereleases.googleblog.com/2017/04/stable-channel-update-for-desktop.html
Discussion:
Created chromium tracking bugs for this issue:
Affects: fedora-all [bug 1443852]
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6 Supplementary
Via RHSA-2017:1124 https://access.redhat.com/errata/RHSA-2017:1124
2017-03-07
Published