Vulnerability Description
IBM Atlas eDiscovery Process Management 6.0.3 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 126682.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Atlas Ediscovery Process Management | 6.0.3 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/102016Third Party AdvisoryVDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/126682Issue TrackingVDB EntryVendor Advisory
- https://www.ibm.com/support/docview.wss?uid=swg22005836Issue TrackingVendor Advisory
- http://www.securityfocus.com/bid/102016Third Party AdvisoryVDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/126682Issue TrackingVDB EntryVendor Advisory
- https://www.ibm.com/support/docview.wss?uid=swg22005836Issue TrackingVendor Advisory
FAQ
What is CVE-2017-1355?
CVE-2017-1355 is a vulnerability with a CVSS score of 3.7 (LOW). IBM Atlas eDiscovery Process Management 6.0.3 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, r...
How severe is CVE-2017-1355?
CVE-2017-1355 has been rated LOW with a CVSS base score of 3.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-1355?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Atlas Ediscovery Process Management.