cbcvebase.
CVE-2017-1346
published 2017-09-25

CVE-2017-1346: IBM Business Process Manager 7.5, 8.0, and 8.5 temporarily stores files in a temporary folder during offline installs which could be read by a local user…

PriorityP48low2.5CVSS 3.0
AVLACHPRLUINSUCLINAN
EPSS
0.21%
11.9th percentile
IBM Business Process Manager 7.5, 8.0, and 8.5 temporarily stores files in a temporary folder during offline installs which could be read by a local user within a short timespan. IBM X-Force ID: 126461.

Affected

18 ranges
VendorProductVersion rangeFixed in
ibmbusiness_process_manager——
ibmbusiness_process_manager——
ibmbusiness_process_manager——
ibmbusiness_process_manager——
ibmbusiness_process_manager——
ibmbusiness_process_manager——
ibmbusiness_process_manager——
ibmbusiness_process_manager——
ibmbusiness_process_manager——
ibmbusiness_process_manager——
ibmbusiness_process_manager——
ibmbusiness_process_manager——
ibmbusiness_process_manager——
ibmbusiness_process_manager——
ibmbusiness_process_manager——
ibmbusiness_process_manager——
ibmbusiness_process_manager——
ibmbusiness_process_manager——

CVSS provenance

nvdv3.02.5LOWCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
nvdv2.01.9LOWAV:L/AC:M/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.