CVE-2017-1355

LOW

IBM Atlas eDiscovery Process Management 6.0.3 - Info Disclosure

Title source: llm
STIX 2.1

Description

IBM Atlas eDiscovery Process Management 6.0.3 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 126682.

References (3)

Core 3
Core References
Issue Tracking, VDB Entry, Vendor Advisory x_refsource_misc
https://exchange.xforce.ibmcloud.com/vulnerabilities/126682
Issue Tracking, Vendor Advisory x_refsource_confirm
https://www.ibm.com/support/docview.wss?uid=swg22005836
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/102016

Scores

CVSS v3 3.7
EPSS 0.0104
EPSS Percentile 59.9%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-200
Status published
Products (10)
IBM/Atlas eDiscovery Process Management 6.0.3
IBM/Atlas eDiscovery Process Management 6.0.3.2
IBM/Atlas eDiscovery Process Management 6.0.3.3
IBM/Atlas eDiscovery Process Management 6.0.3.4
IBM/Atlas eDiscovery Process Management 6.0.3.5
ibm/atlas_ediscovery_process_management 6.0.3
ibm/atlas_ediscovery_process_management 6.0.3.2
ibm/atlas_ediscovery_process_management 6.0.3.3
ibm/atlas_ediscovery_process_management 6.0.3.4
ibm/atlas_ediscovery_process_management 6.0.3.5
Published Dec 07, 2017
Tracked Since Feb 18, 2026