CVE-2017-1755: Medium severity IBM Security Identity Governance and Intelligence vulnerability

Published Aug 6, 2018

Updated

IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 could allow a local attacker to inject commands into malicious files that could be executed by the administrator. IBM X-Force ID: 135855.

Affected Software

7 affected components

IBM Security Identity Governance and Intelligence=5.2

IBM Security Identity Governance and Intelligence=5.2.1

IBM Security Identity Governance and Intelligence=5.2.2

IBM Security Identity Governance and Intelligence=5.2.2.1

IBM Security Identity Governance and Intelligence=5.2.3

IBM Security Identity Governance and Intelligence=5.2.3.1

IBM Security Identity Governance and Intelligence=5.2.3.2

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg22016869

Event History

Aug 6, 2018

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2017-1755?

The severity of CVE-2017-1755 is medium with a severity value of 6.7.

How does CVE-2017-1755 affect IBM Security Identity Governance Virtual Appliance?

CVE-2017-1755 affects IBM Security Identity Governance Virtual Appliance versions 5.2 through 5.2.3.2.

What is the potential impact of CVE-2017-1755?

CVE-2017-1755 could allow a local attacker to inject commands into malicious files that could be executed by the administrator.

How can I mitigate the vulnerability in IBM Security Identity Governance Virtual Appliance?

To mitigate the vulnerability in IBM Security Identity Governance Virtual Appliance, update to a version that is not affected (5.2.3.3 or later) as recommended by IBM.

Where can I find more information about CVE-2017-1755?

You can find more information about CVE-2017-1755 in the IBM Security bulletin at http://www.ibm.com/support/docview.wss?uid=swg22016869 and the IBM X-Force ID page at https://exchange.xforce.ibmcloud.com/vulnerabilities/135855.