CVE-2017-1679

CWE-200 — Information Exposure3 documents3 sources
Severity
5.5MEDIUM
EPSS
0.0%
top 85.69%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Openpages GRC Platform
Timeline
PublishedSep 10
Latest updateMay 13

Description

IBM OpenPages GRC Platform 7.2, 7.3, 7.4, and 8.0 could allow an attacker to obtain sensitive information from error log files. IBM X-Force ID: 134001.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5ibm/openpages_grc_platform4 versions+3
▶NVDibm/openpages_grc_platform4 versions+3

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-g4wh-85fp-rqc8: IBM OpenPages GRC Platform 7↗2022-05-13
▶
CVEList
CVE-2017-1679: IBM OpenPages GRC Platform 7↗2018-09-10
▶
CVE-2017-1679 (MEDIUM CVSS 5.5) | IBM OpenPages GRC Platform 7.2 | cvebase.io