CVE-2017-1789 - Vulnerability Details

Vendors	Products
Ibm	Tivoli Monitoring

Link	Providers
http://www.ibm.com/support/docview.wss?uid=swg22014096
https://exchange.xforce.ibmcloud.com/vulnerabilities/137034

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "Tivoli Monitoring V6", "vendor": "IBM", "versions": [{"status": "affected", "version": "6.2.3"}, {"status": "affected", "version": "6.3.0"}, {"status": "affected", "version": "6.2.3.1"}, {"status": "affected", "version": "6.2.3.2"}, {"status": "affected", "version": "6.2.3.3"}, {"status": "affected", "version": "6.2.3.4"}, {"status": "affected", "version": "6.2.3.5"}, {"status": "affected", "version": "6.3.0.1"}, {"status": "affected", "version": "6.3.0.2"}, {"status": "affected", "version": "6.3.0.3"}, {"status": "affected", "version": "6.3.0.4"}, {"status": "affected", "version": "6.3.0.5"}, {"status": "affected", "version": "6.3.0.6"}, {"status": "affected", "version": "6.3.0.7"}]}], "datePublic": "2018-03-13T00:00:00", "descriptions": [{"lang": "en", "value": "IBM Tivoli Monitoring V6 6.2.3 and 6.3.0 could allow an unauthenticated user to remotely execute code through unspecified methods. IBM X-Force ID: 137034."}], "metrics": [{"cvssV3_0": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/A:H/AC:L/AV:N/C:H/I:H/PR:N/S:U/UI:N", "version": "3.0"}}], "problemTypes": [{"descriptions": [{"description": "Gain Access", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-03-22T11:57:01", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://www.ibm.com/support/docview.wss?uid=swg22014096"}, {"tags": ["x_refsource_MISC"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/137034"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@us.ibm.com", "DATE_PUBLIC": "2018-03-13T00:00:00", "ID": "CVE-2017-1789", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Tivoli Monitoring V6", "version": {"version_data": [{"version_value": "6.2.3"}, {"version_value": "6.3.0"}, {"version_value": "6.2.3.1"}, {"version_value": "6.2.3.2"}, {"version_value": "6.2.3.3"}, {"version_value": "6.2.3.4"}, {"version_value": "6.2.3.5"}, {"version_value": "6.3.0.1"}, {"version_value": "6.3.0.2"}, {"version_value": "6.3.0.3"}, {"version_value": "6.3.0.4"}, {"version_value": "6.3.0.5"}, {"version_value": "6.3.0.6"}, {"version_value": "6.3.0.7"}]}}]}, "vendor_name": "IBM"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "IBM Tivoli Monitoring V6 6.2.3 and 6.3.0 could allow an unauthenticated user to remotely execute code through unspecified methods. IBM X-Force ID: 137034."}]}, "impact": {"cvssv3": {"BM": {"A": "H", "AC": "L", "AV": "N", "C": "H", "I": "H", "PR": "N", "S": "U", "UI": "N"}}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Gain Access"}]}]}, "references": {"reference_data": [{"name": "http://www.ibm.com/support/docview.wss?uid=swg22014096", "refsource": "CONFIRM", "url": "http://www.ibm.com/support/docview.wss?uid=swg22014096"}, {"name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/137034", "refsource": "MISC", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/137034"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T13:39:32.288Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.ibm.com/support/docview.wss?uid=swg22014096"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/137034"}]}]}, "cveMetadata": {"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2017-1789", "datePublished": "2018-03-22T12:00:00Z", "dateReserved": "2016-11-30T00:00:00", "dateUpdated": "2024-09-16T22:35:36.871Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : Tivoli Monitoring V6 (string)

vendor : IBM (string)

versions : [ »

0 : { »

status : affected (string)

version : 6.2.3 (string)

}

1 : { »

status : affected (string)

version : 6.3.0 (string)

}

2 : { »

status : affected (string)

version : 6.2.3.1 (string)

}

3 : { »

status : affected (string)

version : 6.2.3.2 (string)

}

4 : { »

status : affected (string)

version : 6.2.3.3 (string)

}

5 : { »

status : affected (string)

version : 6.2.3.4 (string)

}

6 : { »

status : affected (string)

version : 6.2.3.5 (string)

}

7 : { »

status : affected (string)

version : 6.3.0.1 (string)

}

8 : { »

status : affected (string)

version : 6.3.0.2 (string)

}

9 : { »

status : affected (string)

version : 6.3.0.3 (string)

}

10 : { »

status : affected (string)

version : 6.3.0.4 (string)

}

11 : { »

status : affected (string)

version : 6.3.0.5 (string)

}

12 : { »

status : affected (string)

version : 6.3.0.6 (string)

}

13 : { »

status : affected (string)

version : 6.3.0.7 (string)

}

]

}

]

datePublic : 2018-03-13T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : IBM Tivoli Monitoring V6 6.2.3 and 6.3.0 could allow an unauthenticated user to remotely execute code through unspecified methods. IBM X-Force ID: 137034. (string)

}

]

metrics : [ »

0 : { »

cvssV3_0 : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 9.8 (number)

baseSeverity : CRITICAL (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/A:H/AC:L/AV:N/C:H/I:H/PR:N/S:U/UI:N (string)

version : 3.0 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : Gain Access (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2018-03-22T11:57:01 (string)

orgId : 9a959283-ebb5-44b6-b705-dcc2bbced522 (string)

shortName : ibm (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : http://www.ibm.com/support/docview.wss?uid=swg22014096 (string)

}

1 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/137034 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : psirt@us.ibm.com (string)

DATE_PUBLIC : 2018-03-13T00:00:00 (string)

ID : CVE-2017-1789 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : Tivoli Monitoring V6 (string)

version : { »

version_data : [ »

0 : { »

version_value : 6.2.3 (string)

}

1 : { »

version_value : 6.3.0 (string)

}

2 : { »

version_value : 6.2.3.1 (string)

}

3 : { »

version_value : 6.2.3.2 (string)

}

4 : { »

version_value : 6.2.3.3 (string)

}

5 : { »

version_value : 6.2.3.4 (string)

}

6 : { »

version_value : 6.2.3.5 (string)

}

7 : { »

version_value : 6.3.0.1 (string)

}

8 : { »

version_value : 6.3.0.2 (string)

}

9 : { »

version_value : 6.3.0.3 (string)

}

10 : { »

version_value : 6.3.0.4 (string)

}

11 : { »

version_value : 6.3.0.5 (string)

}

12 : { »

version_value : 6.3.0.6 (string)

}

13 : { »

version_value : 6.3.0.7 (string)

}

]

}

]

}

vendor_name : IBM (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : IBM Tivoli Monitoring V6 6.2.3 and 6.3.0 could allow an unauthenticated user to remotely execute code through unspecified methods. IBM X-Force ID: 137034. (string)

}

]

}

impact : { »

cvssv3 : { »

BM : { »

A : H (string)

AC : L (string)

AV : N (string)

C : H (string)

I : H (string)

PR : N (string)

S : U (string)

UI : N (string)

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : Gain Access (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : http://www.ibm.com/support/docview.wss?uid=swg22014096 (string)

refsource : CONFIRM (string)

url : http://www.ibm.com/support/docview.wss?uid=swg22014096 (string)

}

1 : { »

name : https://exchange.xforce.ibmcloud.com/vulnerabilities/137034 (string)

refsource : MISC (string)

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/137034 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-05T13:39:32.288Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : http://www.ibm.com/support/docview.wss?uid=swg22014096 (string)

}

1 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/137034 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 9a959283-ebb5-44b6-b705-dcc2bbced522 (string)

assignerShortName : ibm (string)

cveId : CVE-2017-1789 (string)

datePublished : 2018-03-22T12:00:00Z (string)

dateReserved : 2016-11-30T00:00:00 (string)

dateUpdated : 2024-09-16T22:35:36.871Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "88380637-715A-49CB-A9B6-0F8411225E9C", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "94A90709-74AD-4C1B-806C-E7E335A3A773", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.2:*:*:*:*:*:*:*", "matchCriteriaId": "E17308E6-B755-434F-8D2B-E5BBA37BA1F8", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.3:*:*:*:*:*:*:*", "matchCriteriaId": "3C6368EC-1103-419B-8A11-14443501B435", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.4:*:*:*:*:*:*:*", "matchCriteriaId": "1E58E2E4-ADA3-4189-BE8C-1943CDEA7791", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.5:*:*:*:*:*:*:*", "matchCriteriaId": "3F1EEA0F-0501-4316-BD33-ECF44BDD9008", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "EBDE2E0B-6F98-4289-A3AF-EF4105782C7B", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "3A9F4C32-6077-475E-A285-F98A0336C53F", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "0355309B-CCBF-49EA-BE50-7B8E9B637473", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "D3C781C7-70D8-44EA-8847-54815053A092", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "1F409ECF-2033-49E0-9599-DD827CD4DB2A", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "B9C84EAD-BA6A-45B8-A628-2E5003E87778", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "00506901-696A-4EC1-B560-08BBDCBB41CB", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.7:*:*:*:*:*:*:*", "matchCriteriaId": "7484661E-4906-4027-B4B7-9AA952661923", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "IBM Tivoli Monitoring V6 6.2.3 and 6.3.0 could allow an unauthenticated user to remotely execute code through unspecified methods. IBM X-Force ID: 137034."}, {"lang": "es", "value": "IBM Tivoli Monitoring V6 6.2.3 y 6.3.0 podr\u00eda permitir que un usuario no autenticado ejecute c\u00f3digo de forma remota mediante m\u00e9todos sin especificar. IBM X-Force ID: 137034."}], "id": "CVE-2017-1789", "lastModified": "2024-11-21T03:22:22.007", "metrics": {"cvssMetricV2": [{"acInsufInfo": true, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "psirt@us.ibm.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-03-22T12:29:00.503", "references": [{"source": "psirt@us.ibm.com", "tags": ["Vendor Advisory"], "url": "http://www.ibm.com/support/docview.wss?uid=swg22014096"}, {"source": "psirt@us.ibm.com", "tags": ["VDB Entry", "Vendor Advisory"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/137034"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.ibm.com/support/docview.wss?uid=swg22014096"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["VDB Entry", "Vendor Advisory"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/137034"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-94"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:ibm:tivoli_monitoring:6.2.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 88380637-715A-49CB-A9B6-0F8411225E9C (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 94A90709-74AD-4C1B-806C-E7E335A3A773 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.2:*:*:*:*:*:*:* (string)

matchCriteriaId : E17308E6-B755-434F-8D2B-E5BBA37BA1F8 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 3C6368EC-1103-419B-8A11-14443501B435 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 1E58E2E4-ADA3-4189-BE8C-1943CDEA7791 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.5:*:*:*:*:*:*:* (string)

matchCriteriaId : 3F1EEA0F-0501-4316-BD33-ECF44BDD9008 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:ibm:tivoli_monitoring:6.3.0:*:*:*:*:*:*:* (string)

matchCriteriaId : EBDE2E0B-6F98-4289-A3AF-EF4105782C7B (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 3A9F4C32-6077-475E-A285-F98A0336C53F (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 0355309B-CCBF-49EA-BE50-7B8E9B637473 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.3:*:*:*:*:*:*:* (string)

matchCriteriaId : D3C781C7-70D8-44EA-8847-54815053A092 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 1F409ECF-2033-49E0-9599-DD827CD4DB2A (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.5:*:*:*:*:*:*:* (string)

matchCriteriaId : B9C84EAD-BA6A-45B8-A628-2E5003E87778 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.6:*:*:*:*:*:*:* (string)

matchCriteriaId : 00506901-696A-4EC1-B560-08BBDCBB41CB (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.7:*:*:*:*:*:*:* (string)

matchCriteriaId : 7484661E-4906-4027-B4B7-9AA952661923 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : IBM Tivoli Monitoring V6 6.2.3 and 6.3.0 could allow an unauthenticated user to remotely execute code through unspecified methods. IBM X-Force ID: 137034. (string)

}

1 : { »

lang : es (string)

value : IBM Tivoli Monitoring V6 6.2.3 y 6.3.0 podría permitir que un usuario no autenticado ejecute código de forma remota mediante métodos sin especificar. IBM X-Force ID: 137034. (string)

}

]

id : CVE-2017-1789 (string)

lastModified : 2024-11-21T03:22:22.007 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : true (boolean)

baseSeverity : HIGH (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : PARTIAL (string)

baseScore : 7.5 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : PARTIAL (string)

vectorString : AV:N/AC:L/Au:N/C:P/I:P/A:P (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 6.4 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 9.8 (number)

baseSeverity : CRITICAL (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.0 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 5.9 (number)

source : psirt@us.ibm.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 9.8 (number)

baseSeverity : CRITICAL (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.0 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2018-03-22T12:29:00.503 (string)

references : [ »

0 : { »

source : psirt@us.ibm.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://www.ibm.com/support/docview.wss?uid=swg22014096 (string)

}

1 : { »

source : psirt@us.ibm.com (string)

tags : [ »

0 : VDB Entry (string)

1 : Vendor Advisory (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/137034 (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://www.ibm.com/support/docview.wss?uid=swg22014096 (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : VDB Entry (string)

1 : Vendor Advisory (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/137034 (string)

}

]

sourceIdentifier : psirt@us.ibm.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-94 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object