CVE-2017-1716
Current Description
IBM Tivoli Workload Scheduler 8.6.0, 9.1.0, and 9.2.0 could disclose sensitive information to a local attacker due to improper permission settings. IBM X-Force ID: 134638.
Basic Data
| Published | December 13, 2017 |
|---|
| Last Modified | October 03, 2019 |
|---|
| Assigner | cve@mitre.org |
|---|
| Data Type | CVE |
|---|
| Data Format | MITRE |
|---|
| Data Version | 4.0 |
|---|
| Problem Type | CWE-732 |
|---|
| CVE Data Version | 4.0 |
|---|
Base Metric V2
| CVSS 2 - Version | 2.0 |
|---|
| CVSS 2 - Vector String | AV:L/AC:L/Au:N/C:P/I:N/A:N |
|---|
| CVSS 2 - Access Vector | LOCAL |
|---|
| CVSS 2 - Access Complexity | LOW |
|---|
| CVSS 2 - Authentication | NONE |
|---|
| CVSS 2 - Confidentiality Impact | PARTIAL |
|---|
| CVSS 2 - Availability Impact | NONE |
|---|
| CVSS 2 - Base Score | 2.1 |
|---|
| Severity | LOW |
|---|
| Exploitability Score | 3.9 |
|---|
| Impact Score | 2.9 |
|---|
| Obtain All Privilege | false |
|---|
| Obtain User Privilege | false |
|---|
| Obtain Other Privilege | false |
|---|
Base Metric V3
| CVSS 3 - Version | 3.0 |
|---|
| CVSS 3 - Vector String | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
|---|
| CVSS 3 - Attack Vector | LOCAL |
|---|
| CVSS 3 - Attack Complexity | LOW |
|---|
| CVSS 3 - Privileges Required | LOW |
|---|
| CVSS 3 - User Interaction | NONE |
|---|
| CVSS 3 - Scope | UNCHANGED |
|---|
| CVSS 3 - Confidentiality Impact | LOW |
|---|
| CVSS 3 - Integrity Impact | NONE |
|---|
| CVSS 3 - Availability Impact | NONE |
|---|
| CVSS 3 - Base Score | 3.3 |
|---|
| CVSS 3 - Base Severity | LOW |
|---|
| Exploitability Score | 1.8 |
|---|
| Base Severity | LOW |
|---|
Configurations
-
OR - Configuration 1
| Cpe Version | Part | Vendor | Product | Version | Update | Edition | Language | SW Edition | Target SW | Target HW | Other | Version Start Including | Version End Including | Version Start Excluding | Version End Excluding |
|---|
| 2.3 | Application | Ibm | Tivoli Workload Scheduler | 8.6 | * | * | * | * | * | * | * | | | | |
| 2.3 | Application | Ibm | Tivoli Workload Scheduler | 9.1 | * | * | * | * | * | * | * | | | | |
| 2.3 | Application | Ibm | Tivoli Workload Scheduler | 9.2 | * | * | * | * | * | * | * | | | | |
Vulnerable Software List
References
| Name | Source | URL | Tags |
|---|
| 101974 | http://www.securityfocus.com/bid/101974 | BID | Third Party Advisory VDB Entry |
| http://www-01.ibm.com/support/docview.wss?uid=swg22010947 | http://www-01.ibm.com/support/docview.wss?uid=swg22010947 | CONFIRM | Issue Tracking Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/134638 | https://exchange.xforce.ibmcloud.com/vulnerabilities/134638 | MISC | Issue Tracking VDB Entry Vendor Advisory |
Follow @discotekdotca