CVE-2017-1257

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

IBM Security Guardium 10.0 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 124684.

Metrics

CVSS 3.0 4.3/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
IBM	Security Guardium	10.0; 10.0.1; 10.1; 10.1.2; 10.1.3

References

http://www.ibm.com/support/docview.wss?uid=swg22010431Vendor Advisory
http://www.securityfocus.com/bid/102308Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/124684Third Party Advisory, VDB Entry
http://www.ibm.com/support/docview.wss?uid=swg22010431Vendor Advisory
http://www.securityfocus.com/bid/102308Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/124684Third Party Advisory, VDB Entry

Timeline

Published: Dec 20, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-125724.8Persistent Cross Site Scripting (XSS) exists in Splunk Enterprise 6.5.x before 6.5.2, 6.4.x before 6.4.6, and 6.3.x before 6.3.9 and Splunk CVE-2017-125738.8An issue was discovered on PLANEX CS-W50HD devices with firmware before 030720. The device has a command-injection vulnerability in the web CVE-2017-125749.8An issue was discovered on PLANEX CS-W50HD devices with firmware before 030720. A hardcoded credential "supervisor:dangerous" was injected i CVE-2017-125757.5An issue was discovered on the NEC Aterm WG2600HP2 1.0.2. The router has a set of web service APIs for access to and setup of the configurat CVE-2017-125767.2An issue was discovered on the PLANEX CS-QR20 1.30. A hidden and undocumented management page allows an attacker to execute arbitrary code o CVE-2017-125779.8An issue was discovered on the PLANEX CS-QR20 1.30. A hardcoded account / password ("admin:password") is used in the Android application tha CVE-2017-125797.8An insecure suid wrapper binary in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 4.0.24 and earlier allows a non-ro CVE-2017-12586.5IBM Security Guardium 10.0 and 10.1 does not perform an authentication check for a critical resource or functionality allowing anonymous use CVE-2017-125807.8An issue was discovered in IDM UltraEdit through 24.10.0.32. To exploit the vulnerability, on unpatched Windows systems, an attacker could i CVE-2017-125818.1GitHub Electron before 1.6.8 allows remote command execution because of a nodeIntegration bypass vulnerability. This also affects all applic CVE-2017-125829.8Unprivileged user can access all functions in the Surveillance Station component in QNAP TS212P devices with firmware 4.2.1 build 20160601. CVE-2017-125836.1DokuWiki through 2017-02-19b has XSS in the at parameter (aka the DATE_AT variable) to doku.php.