Multiple IBM Products CVE-2017-1211 Local Information Disclosure Vulnerability

Bugtraq ID:	101526
Class:	Design Error
CVE:	CVE-2017-1211
Remote:	No
Local:	Yes
Published:	Oct 18 2017 12:00AM
Updated:	Oct 18 2017 12:00AM
Credit:	IBM.
Vulnerable:	IBM Daeja ViewONE Virtual 5.0 IBM Daeja ViewONE Professional Standard & Virtual 4.1.5
Not Vulnerable:	IBM Daeja ViewONE Virtual 5.0.2.0 iFix001 IBM Daeja ViewONE Professional Standard & Virtual 4.1.5.1 iFix022

Multiple IBM Products CVE-2017-1211 Local Information Disclosure Vulnerability

Multiple IBM Products are prone to local information-disclosure vulnerability.

An attacker can exploit this issue to gain access to sensitive information; this may lead to further attacks.

Multiple IBM Products CVE-2017-1211 Local Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple IBM Products CVE-2017-1211 Local Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple IBM Products CVE-2017-1211 Local Information Disclosure Vulnerability

References:

• IBM Homepage (IBM)
  
• swg22008011:Daeja ViewONE Professional, Standard & Virtual is affected by a disc (IBM)