Access Vulnerability in IBM Algorithmics One-Algo Risk Application by IBM
CVE-2017-1155

4.3MEDIUM

Key Information:

Vendor: IBM
Status: Algo One
Vendor: CVE Published:; 20 March 2017

Summary

A security flaw in IBM Algorithmics One-Algo Risk Application versions 4.9.1, 5.0, and 5.1.0 could enable attackers to access reports belonging to other users via specially crafted HTTP requests. This vulnerability raises significant concerns about data confidentiality and user privacy within the application.

Affected Version(s)

Algo One 4.7

Algo One 4.7.1

Algo One 4.8

References

http://www.ibm.com/support/docview.wss?uid=swg21999754

x_refsource_CONFIRM

http://www.securityfocus.com/bid/96968

vdb-entryx_refsource_BID

CVSS V3.1

Score:

4.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

None

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Mar 20, 2017
Vulnerability Reserved
Nov 30, 2016