Merge branch 'IBM20180502' of https://github.com/ScottMooreIBM/cvelist into ScottMooreIBM-IBM20180502

This commit is contained in:
CVE Team 2018-05-02 08:38:45 -04:00
commit f7a2f49943
No known key found for this signature in database
GPG Key ID: 0DA1F9F56BC892E8
3 changed files with 210 additions and 21 deletions

View File

@ -1,18 +1,85 @@
{
"CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org",
"ID" : "CVE-2017-1255",
"STATE" : "RESERVED"
"data_version" : "4.0",
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"value" : "Obtain Information",
"lang" : "eng"
}
]
}
]
},
"references" : {
"reference_data" : [
{
"refsource" : "CONFIRM",
"title" : "IBM Security Bulletin 2014537 (Security Guardium)",
"name" : "http://www.ibm.com/support/docview.wss?uid=swg22014537",
"url" : "http://www.ibm.com/support/docview.wss?uid=swg22014537"
},
{
"name" : "ibm-guardium-cve20171255-info-disc(124675)",
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/124675",
"title" : "X-Force Vulnerability Report",
"refsource" : "XF"
}
]
},
"data_format" : "MITRE",
"data_type" : "CVE",
"data_version" : "4.0",
"affects" : {
"vendor" : {
"vendor_data" : [
{
"vendor_name" : "IBM",
"product" : {
"product_data" : [
{
"product_name" : "Security Guardium",
"version" : {
"version_data" : [
{
"version_value" : "10.0"
},
{
"version_value" : "10.0.1"
},
{
"version_value" : "10.1"
},
{
"version_value" : "10.1.2"
},
{
"version_value" : "10.1.3"
},
{
"version_value" : "10.1.4"
}
]
}
}
]
}
}
]
}
},
"CVE_data_meta" : {
"DATE_PUBLIC" : "2018-04-30T00:00:00",
"STATE" : "PUBLIC",
"ASSIGNER" : "psirt@us.ibm.com",
"ID" : "CVE-2017-1255"
},
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value" : "IBM Security Guardium 10.0, 10.0.1, and 10.1 through 10.1.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 124675."
}
]
}
},
"data_type" : "CVE"
}

View File

@ -1,17 +1,84 @@
{
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng",
"value" : "Obtain Information"
}
]
}
]
},
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"version" : {
"version_data" : [
{
"version_value" : "10.0"
},
{
"version_value" : "10.0.1"
},
{
"version_value" : "10.1"
},
{
"version_value" : "10.1.2"
},
{
"version_value" : "10.1.3"
},
{
"version_value" : "10.1.4"
}
]
},
"product_name" : "Security Guardium"
}
]
},
"vendor_name" : "IBM"
}
]
}
},
"CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org",
"ID" : "CVE-2017-1601",
"STATE" : "RESERVED"
"DATE_PUBLIC" : "2018-04-30T00:00:00",
"ASSIGNER" : "psirt@us.ibm.com",
"STATE" : "PUBLIC",
"ID" : "CVE-2017-1601"
},
"data_format" : "MITRE",
"data_type" : "CVE",
"data_version" : "4.0",
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value" : "IBM Security Guardium 10.0, 10.0.1, and 10.1 through 10.1.4 Database Activity Monitor does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 132624."
}
]
},
"data_type" : "CVE",
"references" : {
"reference_data" : [
{
"refsource" : "CONFIRM",
"title" : "IBM Security Bulletin 2014230 (Security Guardium)",
"url" : "http://www.ibm.com/support/docview.wss?uid=swg22014230",
"name" : "http://www.ibm.com/support/docview.wss?uid=swg22014230"
},
{
"refsource" : "XF",
"title" : "X-Force Vulnerability Report",
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/132624",
"name" : "ibm-guardium-cve20171601-info-disc(132624)"
}
]
}

View File

@ -1,18 +1,73 @@
{
"CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org",
"ID" : "CVE-2018-1468",
"STATE" : "RESERVED"
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"value" : "Obtain Information",
"lang" : "eng"
}
]
}
]
},
"references" : {
"reference_data" : [
{
"name" : "http://www.ibm.com/support/docview.wss?uid=swg22015968",
"url" : "http://www.ibm.com/support/docview.wss?uid=swg22015968",
"refsource" : "CONFIRM",
"title" : "IBM Security Bulletin 2015968 (API Connect)"
},
{
"title" : "X-Force Vulnerability Report",
"refsource" : "XF",
"name" : "ibm-api-cve20181468-info-disc(140399)",
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/140399"
}
]
},
"data_format" : "MITRE",
"data_type" : "CVE",
"data_version" : "4.0",
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value" : "IBM API Connect 5.0.8.1 and 5.0.8.2 could allow a user to get access to internal environment and sensitive API details to which they are not authorized. IBM X-Force ID: 140399."
}
]
}
},
"CVE_data_meta" : {
"DATE_PUBLIC" : "2018-04-30T00:00:00",
"ASSIGNER" : "psirt@us.ibm.com",
"STATE" : "PUBLIC",
"ID" : "CVE-2018-1468"
},
"affects" : {
"vendor" : {
"vendor_data" : [
{
"vendor_name" : "IBM",
"product" : {
"product_data" : [
{
"version" : {
"version_data" : [
{
"version_value" : "5.0.8.1"
},
{
"version_value" : "5.0.8.2"
}
]
},
"product_name" : "API Connect"
}
]
}
}
]
}
},
"data_version" : "4.0",
"data_format" : "MITRE"
}