CVE-2017-1422

LOW

IBM MaaS360 DTM < 3.81 - Exposure of Sensitive Information via Improper User Rights Verification

Title source: llm
STIX 2.1

Description

IBM MaaS360 DTM all versions up to 3.81 does not perform proper verification for user rights of certain applications which could disclose sensitive information. IBM X-Force ID: 127412.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/100415
Patch, Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg22006985
VDB Entry, Vendor Advisory x_refsource_misc
https://exchange.xforce.ibmcloud.com/vulnerabilities/127412

Scores

CVSS v3 3.3
EPSS 0.0037
EPSS Percentile 28.8%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-200
Status published
Products (2)
IBM/MaaS360 DTM 3.81
ibm/maas360_dtm < 3.81
Published Aug 22, 2017
Tracked Since Feb 18, 2026