admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-07-29 05:56:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

IBM20180313

Browse Source 
Added CVE-2017-1741, CVE-2018-1386, CVE-2018-1435, CVE-2018-1437, CVE-2017-1441, CVE-2017-1444.
This commit is contained in:
Scott Moore - IBM 2018-03-13 19:24:35 -04:00
parent b13b0bcd06
commit 6bc7779535
6 changed files with 511 additions and 46 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

94
2017/1xxx/CVE-2017-1741.json
View File

@ -1,18 +1,90 @@
{
"CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org",
"ID" : "CVE-2017-1741",
"STATE" : "RESERVED"
},
"data_format" : "MITRE",
"data_type" : "CVE",
"data_version" : "4.0",
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value" : "IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information caused by improper handling of Administrative Console panel fields. When exploited an attacker could read files on the file system. IBM X-Force ID: 134931.",
"lang" : "eng"
}
]
}
},
"references" : {
"reference_data" : [
{
"url" : "http://www.ibm.com/support/docview.wss?uid=swg22012342",
"name" : "IBM Security Bulletin 2012342 (WebSphere Application Server)"
},
{
"name" : "X-Force Vulnerability Report",
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/134931"
}
]
},
"data_version" : "4.0",
"affects" : {
"vendor" : {
"vendor_data" : [
{
"vendor_name" : "IBM",
"product" : {
"product_data" : [
{
"version" : {
"version_data" : [
{
"version_value" : "7.0"
},
{
"version_value" : "8.0"
},
{
"version_value" : "8.5"
},
{
"version_value" : "9.0"
}
]
},
"product_name" : "WebSphere Application Server"
}
]
}
}
]
}
},
"impact" : {
"cvssv3" : {
"BM" : {
"AV" : "N",
"PR" : "L",
"AC" : "L",
"I" : "N",
"S" : "U",
"SCORE" : "4.300",
"UI" : "N",
"A" : "N",
"C" : "L"
}
}
},
"CVE_data_meta" : {
"ASSIGNER" : "psirt@us.ibm.com",
"STATE" : "PUBLIC",
"ID" : "CVE-2017-1741",
"DATE_PUBLIC" : "2018-03-06T00:00:00"
},
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"value" : "Obtain Information",
"lang" : "eng"
}
]
}
]
},
"data_format" : "MITRE",
"data_type" : "CVE"
}

81
2018/1xxx/CVE-2018-1386.json
View File

@ -1,18 +1,93 @@
{
"CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org",
"ID" : "CVE-2018-1386",
"STATE" : "RESERVED"
"DATE_PUBLIC" : "2018-03-05T00:00:00",
"STATE" : "PUBLIC",
"ASSIGNER" : "psirt@us.ibm.com"
},
"data_format" : "MITRE",
"impact" : {
"cvssv3" : {
"BM" : {
"C" : "H",
"A" : "H",
"S" : "U",
"AC" : "H",
"I" : "H",
"AV" : "L",
"UI" : "N",
"PR" : "N",
"SCORE" : "7.400"
}
}
},
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng",
"value" : "Gain Privileges"
}
]
}
]
},
"data_type" : "CVE",
"references" : {
"reference_data" : [
{
"name" : "IBM Security Bulletin 2012171 (Workload Scheduler)",
"url" : "http://www.ibm.com/support/docview.wss?uid=swg22012171"
},
{
"name" : "X-Force Vulnerability Report",
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/138208"
}
]
},
"data_version" : "4.0",
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value" : "IBM Tivoli Workload Automation for AIX (IBM Workload Scheduler 8.6, 9.1, 9.2, 9.3, and 9.4) contains directories with improper permissions that could allow a local user to with special access to gain root privileges. IBM X-Force ID: 138208."
}
]
},
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "Workload Scheduler",
"version" : {
"version_data" : [
{
"version_value" : "8.6"
},
{
"version_value" : "9.1"
},
{
"version_value" : "9.2"
},
{
"version_value" : "9.3"
},
{
"version_value" : "9.4"
}
]
}
}
]
},
"vendor_name" : "IBM"
}
]
}
}
}

107
2018/1xxx/CVE-2018-1435.json
View File

@ -1,17 +1,110 @@
{
"CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org",
"ID" : "CVE-2018-1435",
"STATE" : "RESERVED"
"impact" : {
"cvssv3" : {
"BM" : {
"I" : "H",
"SCORE" : "7.800",
"S" : "U",
"UI" : "R",
"PR" : "N",
"AV" : "L",
"A" : "H",
"AC" : "L",
"C" : "H"
}
}
},
"CVE_data_meta" : {
"ID" : "CVE-2018-1435",
"STATE" : "PUBLIC",
"DATE_PUBLIC" : "2018-03-08T00:00:00",
"ASSIGNER" : "psirt@us.ibm.com"
},
"references" : {
"reference_data" : [
{
"name" : "IBM Security Bulletin 2014198 (Notes)",
"url" : "http://www.ibm.com/support/docview.wss?uid=swg22014198"
},
{
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/139563",
"name" : "X-Force Vulnerability Report"
}
]
},
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"version" : {
"version_data" : [
{
"version_value" : "8.5.3.6"
},
{
"version_value" : "8.5"
},
{
"version_value" : "8.5.1"
},
{
"version_value" : "8.5.1.5"
},
{
"version_value" : "8.5.2"
},
{
"version_value" : "8.5.2.4"
},
{
"version_value" : "8.5.3"
},
{
"version_value" : "9.0.1"
},
{
"version_value" : "9.0"
},
{
"version_value" : "8.5.0.2"
},
{
"version_value" : "9.0.1.9"
}
]
},
"product_name" : "Notes"
}
]
},
"vendor_name" : "IBM"
}
]
}
},
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng",
"value" : "Gain Access"
}
]
}
]
},
"data_format" : "MITRE",
"data_type" : "CVE",
"data_format" : "MITRE",
"data_version" : "4.0",
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value" : "IBM Notes 8.5 and 9.0 is vulnerable to a DLL hijacking attack. A remote attacker could trick a user to double click a malicious executable in an attacker-controlled directory, which could result in code execution. IBM X-Force ID: 139563.",
"lang" : "eng"
}
]
}

109
2018/1xxx/CVE-2018-1437.json
View File

@ -1,17 +1,110 @@
{
"CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org",
"ID" : "CVE-2018-1437",
"STATE" : "RESERVED"
"data_type" : "CVE",
"references" : {
"reference_data" : [
{
"url" : "http://www.ibm.com/support/docview.wss?uid=swg22014201",
"name" : "IBM Security Bulletin 2014201 (Notes)"
},
{
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/139565",
"name" : "X-Force Vulnerability Report"
}
]
},
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"version" : {
"version_data" : [
{
"version_value" : "8.5.3.6"
},
{
"version_value" : "8.5"
},
{
"version_value" : "8.5.1"
},
{
"version_value" : "8.5.1.5"
},
{
"version_value" : "8.5.2"
},
{
"version_value" : "8.5.2.4"
},
{
"version_value" : "8.5.3"
},
{
"version_value" : "9.0.1"
},
{
"version_value" : "9.0"
},
{
"version_value" : "8.5.0.2"
},
{
"version_value" : "9.0.1.9"
}
]
},
"product_name" : "Notes"
}
]
},
"vendor_name" : "IBM"
}
]
}
},
"data_version" : "4.0",
"impact" : {
"cvssv3" : {
"BM" : {
"AC" : "L",
"S" : "U",
"AV" : "L",
"PR" : "N",
"A" : "H",
"SCORE" : "7.800",
"UI" : "R",
"C" : "H",
"I" : "H"
}
}
},
"data_format" : "MITRE",
"data_type" : "CVE",
"data_version" : "4.0",
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng",
"value" : "Gain Privileges"
}
]
}
]
},
"CVE_data_meta" : {
"ASSIGNER" : "psirt@us.ibm.com",
"DATE_PUBLIC" : "2018-03-08T00:00:00",
"STATE" : "PUBLIC",
"ID" : "CVE-2018-1437"
},
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value" : "IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to multiple untrusted search path. A local attacker could exploit this vulnerability to DLL hijacking to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 139565.",
"lang" : "eng"
}
]
}

78
2018/1xxx/CVE-2018-1441.json
View File

@ -1,17 +1,83 @@
{
"CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org",
"ID" : "CVE-2018-1441",
"STATE" : "RESERVED"
"references" : {
"reference_data" : [
{
"url" : "http://www.ibm.com/support/docview.wss?uid=swg22013557",
"name" : "IBM Security Bulletin 2013557 (Monitoring)"
},
{
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/139597",
"name" : "X-Force Vulnerability Report"
}
]
},
"data_format" : "MITRE",
"data_type" : "CVE",
"data_format" : "MITRE",
"impact" : {
"cvssv3" : {
"BM" : {
"I" : "L",
"C" : "L",
"A" : "N",
"S" : "C",
"SCORE" : "6.100",
"PR" : "N",
"UI" : "R",
"AV" : "N",
"AC" : "L"
}
}
},
"data_version" : "4.0",
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value" : "IBM Application Performance Management - Response Time Monitoring Agent (IBM Monitoring 8.1.3 and 8.1.4) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139597."
}
]
},
"CVE_data_meta" : {
"ASSIGNER" : "psirt@us.ibm.com",
"ID" : "CVE-2018-1441",
"DATE_PUBLIC" : "2018-03-10T00:00:00",
"STATE" : "PUBLIC"
},
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "Monitoring",
"version" : {
"version_data" : [
{
"version_value" : "8.1.3"
},
{
"version_value" : "8.1.4"
}
]
}
}
]
},
"vendor_name" : "IBM"
}
]
}
},
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng",
"value" : "Cross-Site Scripting"
}
]
}
]
}

88
2018/1xxx/CVE-2018-1444.json
View File

@ -1,18 +1,84 @@
{
"CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org",
"ID" : "CVE-2018-1444",
"STATE" : "RESERVED"
},
"data_format" : "MITRE",
"data_type" : "CVE",
"data_version" : "4.0",
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value" : "IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139906.",
"lang" : "eng"
}
]
}
},
"impact" : {
"cvssv3" : {
"BM" : {
"C" : "L",
"S" : "C",
"I" : "L",
"UI" : "R",
"AV" : "N",
"AC" : "L",
"SCORE" : "5.400",
"PR" : "L",
"A" : "N"
}
}
},
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"value" : "Cross-Site Scripting",
"lang" : "eng"
}
]
}
]
},
"affects" : {
"vendor" : {
"vendor_data" : [
{
"vendor_name" : "IBM",
"product" : {
"product_data" : [
{
"version" : {
"version_data" : [
{
"version_value" : "8.5"
},
{
"version_value" : "9.0"
}
]
},
"product_name" : "WebSphere Portal"
}
]
}
}
]
}
},
"data_format" : "MITRE",
"CVE_data_meta" : {
"ASSIGNER" : "psirt@us.ibm.com",
"DATE_PUBLIC" : "2018-03-08T00:00:00",
"STATE" : "PUBLIC",
"ID" : "CVE-2018-1444"
},
"data_type" : "CVE",
"references" : {
"reference_data" : [
{
"url" : "https://www.ibm.com/support/docview.wss?uid=swg22014392",
"name" : "IBM Security Bulletin 2014392 (WebSphere Portal)"
},
{
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/139906",
"name" : "X-Force Vulnerability Report"
}
]
},
"data_version" : "4.0"
}