IBM Security Privileged Identity Manager CVE-2017-1705 Information Disclosure Vulnerability

Bugtraq ID:	103677
Class:	Input Validation Error
CVE:	CVE-2017-1705
Remote:	Yes
Local:	No
Published:	Mar 21 2018 12:00AM
Updated:	Mar 21 2018 12:00AM
Credit:	IBM X-Force Ethical Hacking Team: Ron Craig, Warren Moynihan, Jonathan Fitz-Gerald, John Zuccato, Rodney Ryan, Chris Shepherd, Dmitriy Beryoza
Vulnerable:	IBM Security Privileged Identity Manager 2.1
Not Vulnerable:

IBM Security Privileged Identity Manager CVE-2017-1705 Information Disclosure Vulnerability

IBM Security Privileged Identity Manager is prone to an information-disclosure vulnerability.

An attacker can exploit this issue to gain access to sensitive information; this may lead to further attacks.

IBM Security Privileged Identity Manager 2.1.0 is vulnerable; other versions may also be affected.

IBM Security Privileged Identity Manager CVE-2017-1705 Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: http://

IBM Security Privileged Identity Manager CVE-2017-1705 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Security Privileged Identity Manager CVE-2017-1705 Information Disclosure Vulnerability

References:

• IBM Homepage (IBM)
  
• swg22014988: Security Bulletin: IBM Security Privileged Identity Manager is affe (IBM)