7.5high
CVE-2017-1264
IBM Security Guardium 10.0 does not prove or insufficiently proves that the actors identity is correct which can lead to exposure of resour…
Published 9 y ago · modified 4 mo ago · JSON
CVSS
7.5
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.5%
percentile 75%
Public exploits
0
none known
Summary
IBM Security Guardium 10.0 does not prove or insufficiently proves that the actors identity is correct which can lead to exposure of resources or functionality to unintended actors. IBM X-Force ID: 124739.
Exploit prediction (EPSS)
1.53% probability of exploitation in the next 30 days, higher than 75% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 7.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Affected products
- IBM Security Guardium
Classification
- Weakness
- CWE-287 Improper Authentication
References
- exchange.xforce.ibmcloud.com /vulnerabilities/124739 · x_refsource_MISC, x_transferred
- ibm.com /support/docview.wss?uid=swg22004425 · x_refsource_CONFIRM, x_transferred
- securityfocus.com /bid/99369 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2017-1264
- NVD: CVE-2017-1264
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.