Information Disclosure Vulnerability in IBM Atlas eDiscovery Process Management
CVE-2017-1355
3.7LOW
Key Information:
- Vendor
- IBM
- Vendor
- CVE Published:
- 7 December 2017
Summary
IBM Atlas eDiscovery Process Management 6.0.3 contains a vulnerability that exposes sensitive information through URL parameters. This security flaw allows unauthorized access to critical data if an attacker can obtain these URLs via server logs, referrer headers, or the browser history of users. The implications of this vulnerability highlight the importance of securing URL parameters in web applications to safeguard user data from potential breaches.
Affected Version(s)
Atlas eDiscovery Process Management 6.0.3
Atlas eDiscovery Process Management 6.0.3.2
Atlas eDiscovery Process Management 6.0.3.3
References
CVSS V3.1
Score:
3.7
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved