CVE-2017-1267: Input Validation
Published Jul 21, 2017
·Updated
IBM Security Guardium 10.0 and 10.1 processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code. IBM X-Force ID: 124742.
Affected Software
7 affected components
IBM Security Guardium=9.0
IBM Security Guardium=9.1
IBM Security Guardium=9.5
IBM Security Guardium=10.0
IBM Security Guardium=10.0.1
IBM Security Guardium=10.1
IBM Security Guardium=10.1.2
Remediation
Patch Available
Event History
Jul 21, 2017
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-1267?
CVE-2017-1267 has a High severity rating due to its impact on the integrity of the code.
2
How do I fix CVE-2017-1267?
To fix CVE-2017-1267, update to the latest version of IBM Security Guardium that has addressed this vulnerability.
3
What versions of IBM Security Guardium are affected by CVE-2017-1267?
CVE-2017-1267 affects IBM Security Guardium versions 9.0, 9.1, 9.5, 10.0, 10.0.1, 10.1, and 10.1.2.
4
What is the vulnerability type of CVE-2017-1267?
CVE-2017-1267 is classified as an arbitrary code execution vulnerability.
5
Can I mitigate CVE-2017-1267 without upgrading?
Mitigation for CVE-2017-1267 is limited, and upgrading to a patched version is strongly recommended.