PT-2017-12073

CVE-2017-1153

Published

2017-03-27

Updated

2019-10-03

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Report Manager versions 3.2 through 3.5

Description The issue allows an authenticated user to execute actions that they do not have access to.

Recommendations For versions 3.2 through 3.5, update to a version that contains a fix for this issue to prevent unauthorized access to actions.

Exploitability

Fix

Vendors

Affected products

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾