Local Information Disclosure in IBM Emptoris Services Procurement
CVE-2017-1441

5.5MEDIUM

Key Information:

Vendor
IBM
Status
Emptoris Services Procurement
Vendor
CVE Published:
30 August 2017

Summary

The vulnerability in IBM Emptoris Services Procurement 10.0.0.5 allows local users to potentially access sensitive information due to insufficient access control measures. This flaw emphasizes the importance of securing sensitive data against unauthorized local access and highlights the need for robust access control protocols in software systems.

Affected Version(s)

Emptoris Services Procurement 10.0.0.5

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/128106
x_refsource_MISC
http://www.securityfocus.com/bid/99547
vdb-entryx_refsource_BID
http://www-01.ibm.com/support/docview.wss?uid=swg22005550
x_refsource_CONFIRM

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.