CVE-2017-1409: Infoleak

Published Aug 6, 2018

Updated

IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 127396.

Affected Software

7 affected components

IBM Security Identity Governance and Intelligence=5.2

IBM Security Identity Governance and Intelligence=5.2.1

IBM Security Identity Governance and Intelligence=5.2.2

IBM Security Identity Governance and Intelligence=5.2.2.1

IBM Security Identity Governance and Intelligence=5.2.3

IBM Security Identity Governance and Intelligence=5.2.3.1

IBM Security Identity Governance and Intelligence=5.2.3.2

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg22016869

Event History

Aug 6, 2018

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2017-1409?

The severity of CVE-2017-1409 is classified as high due to its potential to disclose sensitive information to unauthorized users.

How do I fix CVE-2017-1409?

To fix CVE-2017-1409, upgrade the IBM Security Identity Governance and Intelligence to the latest version provided by IBM.

What versions are affected by CVE-2017-1409?

CVE-2017-1409 affects IBM Security Identity Governance Virtual Appliance versions 5.2 through 5.2.3.2.

What type of information does CVE-2017-1409 disclose?

CVE-2017-1409 discloses sensitive information that could be exploited for further attacks on the system.

Who is responsible for addressing CVE-2017-1409?

It is the responsibility of administrators of affected IBM Security Identity Governance installations to address CVE-2017-1409.