2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2017-1335" ,
"sourceIdentifier" : "psirt@us.ibm.com" ,
"published" : "2017-10-03T01:29:01.467" ,
2024-12-08 03:06:42 +00:00
"lastModified" : "2024-11-21T03:21:44.253" ,
"vulnStatus" : "Modified" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126243."
} ,
{
"lang" : "es" ,
"value" : "IBM RELM 4.0, 5.0 y 6.0 es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban c\u00f3digo JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades planeadas. Esto podr\u00eda dar lugar a una revelaci\u00f3n de credenciales en una sesi\u00f3n de confianza. IBM X-Force ID: 126243."
}
] ,
"metrics" : {
"cvssMetricV30" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.0" ,
"vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" ,
2024-12-08 03:06:42 +00:00
"baseScore" : 5.4 ,
"baseSeverity" : "MEDIUM" ,
2023-04-24 12:24:31 +02:00
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "LOW" ,
"userInteraction" : "REQUIRED" ,
"scope" : "CHANGED" ,
"confidentialityImpact" : "LOW" ,
"integrityImpact" : "LOW" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "NONE"
2023-04-24 12:24:31 +02:00
} ,
"exploitabilityScore" : 2.3 ,
"impactScore" : 2.7
}
] ,
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N" ,
2024-12-08 03:06:42 +00:00
"baseScore" : 3.5 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "NETWORK" ,
"accessComplexity" : "MEDIUM" ,
"authentication" : "SINGLE" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "PARTIAL" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "NONE"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "LOW" ,
"exploitabilityScore" : 6.8 ,
"impactScore" : 2.9 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : true
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-79"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C380E168-9045-4BF3-A485-2943B2FDE44D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8ED17A54-D64F-4FEC-A9FF-1D85C0E0595E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.5:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5917861D-85E7-45F6-9150-BD6F2E272832"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.6:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "90570EDF-C0A3-4AF5-9763-2D6473762A24"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.7:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "608625CE-F543-4DCA-A3F9-70A35ECD1550"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D5419531-869F-4389-AF72-18F6E0DF3CA3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8F01BD6B-30EA-4AD6-A2CA-04638FF59DF4"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "3E8B81FD-2288-4DD3-9AAC-76016FFA2D30"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "08EEA77B-8151-407C-A840-6E2334FF962B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F5ECD177-5310-44DA-A364-1077898C3A50"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7F242460-F1F6-4D37-8817-4F6040FB5F5C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A1D97FEF-5C37-47EC-9B25-F05B9C5B03BE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A1443C0B-D85D-4A8C-AB00-E092097D93EF"
}
]
}
]
}
] ,
"references" : [
{
"url" : "http://www.ibm.com/support/docview.wss?uid=swg22008785" ,
"source" : "psirt@us.ibm.com" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "http://www.securityfocus.com/bid/101062" ,
"source" : "psirt@us.ibm.com" ,
"tags" : [
"Third Party Advisory" ,
"VDB Entry"
]
} ,
{
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126243" ,
"source" : "psirt@us.ibm.com" ,
"tags" : [
"VDB Entry"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "http://www.ibm.com/support/docview.wss?uid=swg22008785" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "http://www.securityfocus.com/bid/101062" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Third Party Advisory" ,
"VDB Entry"
]
} ,
{
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/126243" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"VDB Entry"
]
2023-04-24 12:24:31 +02:00
}
]
}
