CVE-2017-1264

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

IBM Security Guardium 10.0 does not prove or insufficiently proves that the actors identity is correct which can lead to exposure of resources or functionality to unintended actors. IBM X-Force ID: 124739.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-287

Affected software

Vendor	Product	Versions
IBM	Security Guardium	10.0; 10.0.1; 10.1; 10.1.2

References

http://www.ibm.com/support/docview.wss?uid=swg22004425Vendor Advisory
http://www.securityfocus.com/bid/99369Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/124739Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22004425Vendor Advisory
http://www.securityfocus.com/bid/99369Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/124739Vendor Advisory

Timeline

Published: Jul 5, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-126408.8ImageMagick 7.0.6-1 has an out-of-bounds read vulnerability in ReadOneMNGImage in coders/png.c.CVE-2017-126418.8ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadOneJNGImage in coders\png.c.CVE-2017-126428.8ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMPCImage in coders\mpc.c.CVE-2017-126436.5ImageMagick 7.0.6-1 has a memory exhaustion vulnerability in ReadOneJNGImage in coders\png.c.CVE-2017-126448.8ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadDCMImage in coders\dcm.c.CVE-2017-126456.1XSS exists in Liferay Portal before 7.0 CE GA4 via an invalid portletId.CVE-2017-126466.1XSS exists in Liferay Portal before 7.0 CE GA4 via a login name, password, or e-mail address.CVE-2017-126476.1XSS exists in Liferay Portal before 7.0 CE GA4 via a Knowledge Base article title.CVE-2017-126486.1XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL.CVE-2017-126496.1XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted title or summary that is mishandled in the Web Content Display.CVE-2017-12655.9IBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4, and 10.5 does not validate, or incorrectly validates, a certificate. This CVE-2017-126509.8SQL Injection exists in the Loginizer plugin before 1.3.6 for WordPress via the X-Forwarded-For HTTP header.