CVE-2017-1795

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

IBM WebSphere MQ 7.5, 8.0, and 9.0 through 9.0.4 could allow a local user to obtain highly sensitive information via trace logs in IBM WebSphere MQ Managed File Transfer. IBM X-Force ID: 137042.

Metrics

CVSS 3.0 4.4/10CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-532

Affected software

VendorProductVersions
IBMWebSphere MQ7.5; 8.0; 9.0.1; 9.0.2; 9.0.3; 9.0.4; 9.0

References

Timeline

Published
Jul 6, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-179508.8Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter.CVE-2017-179519.8PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter.CVE-2017-179528.6PHP Scripts Mall PHP Multivendor Ecommerce has a predicable registration URL, which makes it easier for remote attackers to register with anCVE-2017-179536.1PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter.CVE-2017-179546.1PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter.CVE-2017-179556.1PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter.CVE-2017-179566.1PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter.CVE-2017-179579.8PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter.CVE-2017-179586.1PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the my_wishlist.php fid parameter.CVE-2017-179599.8PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter.CVE-2017-179608.8PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php.CVE-2017-179675.5pptreader.dll in Kingsoft WPS Office 10.1.0.6930 allows remote attackers to cause a denial of service via a crafted PPT file, aka CNVD-2017-
CVE-2017-1795: Medium severity, CVSS 4.4 | Vulnix