CVE-2017-1251
published 2017-11-27CVE-2017-1251: An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker. IBM X-Force ID: 124631.
PriorityP419medium4.3CVSS 3.0
AVNACLPRLUINSUCLINAN
EPSS
0.74%
50.2th percentile
An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker. IBM X-Force ID: 124631.
Affected
109 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | rational_collaborative_lifecycle_management | — | — |
| ibm | rational_collaborative_lifecycle_management | — | — |
| ibm | rational_collaborative_lifecycle_management | — | — |
| ibm | rational_collaborative_lifecycle_management | — | — |
| ibm | rational_collaborative_lifecycle_management | — | — |
| ibm | rational_collaborative_lifecycle_management | — | — |
| ibm | rational_collaborative_lifecycle_management | — | — |
| ibm | rational_collaborative_lifecycle_management | — | — |
| ibm | rational_collaborative_lifecycle_management | — | — |
| ibm | rational_collaborative_lifecycle_management | — | — |
| ibm | rational_collaborative_lifecycle_management | — | — |
| ibm | rational_collaborative_lifecycle_management | — | — |
| ibm | rational_collaborative_lifecycle_management | — | — |
| ibm | rational_collaborative_lifecycle_management | — | — |
| ibm | rational_collaborative_lifecycle_management | — | — |
| ibm | rational_collaborative_lifecycle_management | — | — |
| ibm | rational_doors_next_generation | — | — |
| ibm | rational_doors_next_generation | — | — |
| ibm | rational_doors_next_generation | — | — |
| ibm | rational_doors_next_generation | — | — |
| ibm | rational_doors_next_generation | — | — |
| ibm | rational_doors_next_generation | — | — |
| ibm | rational_doors_next_generation | — | — |
| ibm | rational_doors_next_generation | — | — |
| ibm | rational_doors_next_generation | — | — |
CVSS provenance
nvdv3.04.3MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
osv5.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
libdbd-mysql-perl vulnerabilities
osv·2025-04-07·CVSS 5.9
CVE-2016-1249 libdbd-mysql-perl vulnerabilities
libdbd-mysql-perl vulnerabilities
It was discovered that libdbd-mysql-perl did not correctly handle certain
SQL queries. An attacker could possibly use this issue to cause a denial
of service. (CVE-2016-1249)
It was discovered that libdbd-mysql-perl did not correctly handle certain
memory operations, which could lead to a use-after-free vulnerability. A
remote attacker could possibly use this issue to cause a denial of service
or execute arbitrary code. (CVE-2016-1251, CVE-2017-10788)
It was discovered that libdbd-mysql-perl did not properly enforce SSL
connections depending on the mysql_ssl setting. A machine-in-the-middle
attacker could possibly use this issue to spoof servers. (CVE-2017-10789)
GHSA
GHSA-h6r4-95vh-j23h: An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker
ghsa_unreviewed·2022-05-17
CVE-2017-1251 [MEDIUM] CWE-200 GHSA-h6r4-95vh-j23h: An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker
An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker. IBM X-Force ID: 124631.
OSV
libdbd-mysql-perl vulnerabilities
osv·2022-04-01·CVSS 5.9
CVE-2016-1249 libdbd-mysql-perl vulnerabilities
libdbd-mysql-perl vulnerabilities
It was discovered that the DBD::mysql module, when configured with server-side
prepared statement support, was susceptible to operations that would result in
improper memory access. An attacker could possibly use this issue to cause
DBD::mysql to crash, resulting in a denial of service.
(CVE-2016-1249, CVE-2016-1251)
It was discovered that the DBD::mysql module was susceptible to an operation
that would result in improper memory access, introduced through incorrect
documentation and code examples. An attacker could possibly use this issue to
cause DBD::mysql to crash or potentially cause other, unspecified, impact.
(CVE-2017-10788)
It was discovered that the DBD::mysql module processed SSL/TLS settings in a
way that did not fully correlate with the resp
No detection rules found.
No writeups or analysis indexed.
2017-11-27
Published