CVE-2017-1694

EPSS 0.8%

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

20 dez 2017Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

IBM Integration Bus 9.0 and 10.0 transmits user credentials in plain in clear text which can be read by an attacker using man in the middle techniques. IBM X-Force ID: 134165.

Produtos afetados

IBM · Integration Bus

Referências

https://exchange.xforce.ibmcloud.com/vulnerabilities/134165 http://www.ibm.com/support/docview.wss?uid=swg22011695 http://www.securityfocus.com/bid/102215