CVE-2017-1309
First published: Wed Jul 19 2017(Updated: )
IBM InfoSphere Master Data Management Server 11.0 - 11.6 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 125463.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM InfoSphere Master Data Management Collaborative Server | =11.0 | |
| IBM InfoSphere Master Data Management Collaborative Server | =11.3 | |
| IBM InfoSphere Master Data Management Collaborative Server | =11.4 | |
| IBM InfoSphere Master Data Management Collaborative Server | =11.5 | |
| IBM InfoSphere Master Data Management Collaborative Server | =11.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-1309?
CVE-2017-1309 is categorized as a medium severity vulnerability due to the exposure of user credentials.
How do I fix CVE-2017-1309?
To fix CVE-2017-1309, update IBM InfoSphere Master Data Management Server to a version that addresses this credential storage issue.
What impact does CVE-2017-1309 have on security?
CVE-2017-1309 can lead to unauthorized access as user credentials are stored in plain text, making them readable by local users.
Which versions of IBM InfoSphere Master Data Management Server are affected by CVE-2017-1309?
CVE-2017-1309 affects IBM InfoSphere Master Data Management Server versions 11.0 through 11.6.
Is CVE-2017-1309 a local or remote vulnerability?
CVE-2017-1309 is a local vulnerability, as it requires local access to read the stored plain text credentials.
- agent/type
- agent/references
- agent/severity
- agent/author
- agent/weakness
- agent/remedy
- agent/softwarecombine
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm infosphere master data management collaborative server
- version/ibm infosphere master data management collaborative server/11.0
- version/ibm infosphere master data management collaborative server/11.3
- version/ibm infosphere master data management collaborative server/11.4
- version/ibm infosphere master data management collaborative server/11.5
- version/ibm infosphere master data management collaborative server/11.6