PT-2017-12981
CVE-2017-1346
·
تاريخ النشر
2017-09-25
·
تاريخ التحديث
2017-09-28
الوصف من
CVSS 3.1
2.5
منخفضةالمقاييسAV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Business Process Manager versions 7.5 through 8.5
Description
The issue allows a local user to read files temporarily stored in a folder during offline installs, within a short timespan.
Recommendations
For versions 7.5 through 8.5, consider restricting access to the temporary folder used during offline installs to prevent unauthorized reading of files.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾