CVE-2017-1201

EUVD-2017-10217 · Published Oct 5, 2017

IBM BigFix Compliance Analytics 1.9.79 (TEMA SUAv1 SCA SCM) stores user credentials in clear text which can be read by a local user. IBM X-Force ID: 123676.

Technologies

Ibm Bigfix Security Compliance Analytics

Weaknesses

CWE-522

CVSS scores

v3.07.8CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
v2.02.1AV:L/AC:L/Au:N/C:P/I:N/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Privilege Escalation

T1068Exploitation for Privilege Escalation

References

http://www.ibm.com/support/docview.wss?uid=swg22008114
https://exchange.xforce.ibmcloud.com/vulnerabilities/123676

Potentially impacted assets

See if this affects your attack surface