CVE-2017-1553: XSS

Published Nov 1, 2017

Updated

IBM Infosphere BigInsights 4.2.0 and 4.2.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131397.

Affected Software

2 affected components

IBM Infosphere BigInsights=4.2.0

IBM Infosphere BigInsights=4.2.5

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg22009192

Event History

Nov 1, 2017

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-1553?

CVE-2017-1553 has been rated as a medium severity vulnerability.

What versions of IBM InfoSphere BigInsights are affected by CVE-2017-1553?

CVE-2017-1553 affects IBM InfoSphere BigInsights versions 4.2.0 and 4.2.5.

How can I fix CVE-2017-1553?

To mitigate CVE-2017-1553, it is recommended to upgrade to a patched version of IBM InfoSphere BigInsights.

What type of vulnerability is CVE-2017-1553?

CVE-2017-1553 is a cross-site scripting vulnerability that allows for arbitrary JavaScript code execution.

What potential risks does CVE-2017-1553 pose?

CVE-2017-1553 could lead to credential disclosure within a trusted session due to the ability to alter the Web UI functionality.