CVE-2017-1412: Infoleak

Published Aug 6, 2018

Updated

IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 127400.

Affected Software

7 affected components

IBM Security Identity Governance and Intelligence=5.2

IBM Security Identity Governance and Intelligence=5.2.1

IBM Security Identity Governance and Intelligence=5.2.2

IBM Security Identity Governance and Intelligence=5.2.2.1

IBM Security Identity Governance and Intelligence=5.2.3

IBM Security Identity Governance and Intelligence=5.2.3.1

IBM Security Identity Governance and Intelligence=5.2.3.2

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg22016869

Event History

Aug 6, 2018

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2017-1412?

CVE-2017-1412 has been classified as a vulnerability of moderate severity due to the exposure of sensitive information.

How do I fix CVE-2017-1412?

To fix CVE-2017-1412, ensure that you update IBM Security Identity Governance Virtual Appliance to version 5.2.3.3 or later.

What types of information are exposed by CVE-2017-1412?

CVE-2017-1412 can expose sensitive information about the environment, users, or associated data through error messages.

Which versions are affected by CVE-2017-1412?

CVE-2017-1412 affects IBM Security Identity Governance Virtual Appliance versions 5.2 through 5.2.3.2.

Is there a workaround for CVE-2017-1412?

There is no official workaround for CVE-2017-1412, so patching is the recommended action.