Information Disclosure Vulnerability in IBM Atlas eDiscovery Process Management
CVE-2017-1355

3.7LOW

Key Information:

Vendor
IBM
Status
Atlas Ediscovery Process Management
Vendor
CVE Published:
7 December 2017

Summary

IBM Atlas eDiscovery Process Management 6.0.3 contains a vulnerability that exposes sensitive information through URL parameters. This security flaw allows unauthorized access to critical data if an attacker can obtain these URLs via server logs, referrer headers, or the browser history of users. The implications of this vulnerability highlight the importance of securing URL parameters in web applications to safeguard user data from potential breaches.

Affected Version(s)

Atlas eDiscovery Process Management 6.0.3

Atlas eDiscovery Process Management 6.0.3.2

Atlas eDiscovery Process Management 6.0.3.3

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/126682
x_refsource_MISC
https://www.ibm.com/support/docview.wss?uid=swg22005836
x_refsource_CONFIRM
http://www.securityfocus.com/bid/102016
vdb-entryx_refsource_BID

CVSS V3.1

Score:
3.7
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.