VulnerabilityModified
CVE-2017-1679
IBM OpenPages GRC Platform 7.2, 7.3, 7.4, and 8.0 could allow an attacker to obtain sensitive information from error log files.
MEDIUM 5.5EPSS 0.37%
Does this matter?
Lower severity and a low EPSS score (0.37%). Track it; it rarely justifies an emergency change on its own.
Description
IBM OpenPages GRC Platform 7.2, 7.3, 7.4, and 8.0 could allow an attacker to obtain sensitive information from error log files. IBM X-Force ID: 134001.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.37% probability · 30th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- ibm/openpages grc platform
- Source
- psirt@us.ibm.com
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/134001VDB Entry, Vendor Advisory
- https://www.ibm.com/support/docview.wss?uid=ibm10728737Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/134001VDB Entry, Vendor Advisory
- https://www.ibm.com/support/docview.wss?uid=ibm10728737Patch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.