CVE-2017-1377

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

IBM Runbook Automation reveals sensitive information in error messages that could be used in further attacks against the system. IBM X-Force ID: 126874.

Metrics

CVSS 3.0 4.3/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
IBM	Runbook Automation	N/A

References

http://www.ibm.com/support/docview.wss?uid=swg22007031Vendor Advisory
http://www.securityfocus.com/bid/100247Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/126874Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22007031Vendor Advisory
http://www.securityfocus.com/bid/100247Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/126874Vendor Advisory

Timeline

Published: Aug 10, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-137719.8Lexmark Scan To Network (SNF) 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests, which CVE-2017-137728.8Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated users to execute arb CVE-2017-137747.8Hikvision iVMS-4200 devices before v2.6.2.7 allow local users to generate password-recovery codes via unspecified vectors.CVE-2017-137756.5GraphicsMagick 1.3.26 has a denial of service issue in ReadJNXImage() in coders/jnx.c whereby large amounts of CPU and memory resources may CVE-2017-137766.5GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c "Read hex image data" version!=10 case that results CVE-2017-137776.5GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c "Read hex image data" version==10 case that results CVE-2017-137786.1Fiyo CMS 2.0.7 has XSS in dapur\apps\app_config\sys_config.php via the site_name parameter.CVE-2017-137797.8GSTN_offline_tool in India Goods and Services Tax Network (GSTN) Offline Utility tool before 1.2 executes winstart-server.vbs from the "C:\G CVE-2017-13787.8IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) disclosed unencrypted login credentials to Vmware vCenter in the applicat CVE-2017-137807.5The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows directory traversal attacks for reading arbitrary files via the module/admin_conf/CVE-2017-137825.5An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows at CVE-2017-137838.8An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windo