CVE-2017-1153 — Corporation Tririga Application Platform vulnerability

4 documents4 sources

Severity

8.8HIGHNVD

EPSS

0.5%

top 32.83%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Corporation Tririga Application Platform IBM Tririga Application Platform

Timeline

PublishedMar 27

Latest updateMay 13

Description

IBM TRIRIGA Report Manager 3.2 through 3.5 contains a vulnerability that could allow an authenticated user to execute actions that they do not have access to. IBM Reference #: 1999563.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶NVDibm/tririga_application_platform33 versions+32

▶CVEListV5ibm_corporation/tririga_application_platform13 versions+12

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

GHSA

GHSA-g3jv-4qqc-vr5q: IBM TRIRIGA Report Manager 3↗2022-05-13

▶

CVEList

CVE-2017-1153: IBM TRIRIGA Report Manager 3↗2017-03-27

▶

💥Exploits & PoCs

Exploit-DB

Microsoft Windows - 'win32k!NtGdiEnumFonts' Kernel Pool Memory Disclosure↗2017-06-21

▶