PT-2017-13453
CVE-2017-1441
·
Published
2017-08-30
·
Updated
2019-10-03
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Emptoris Services Procurement version 10.0.0.5
Description
The issue is related to improper access control, which could allow a local user to view sensitive information stored locally.
Recommendations
For IBM Emptoris Services Procurement version 10.0.0.5, consider restricting local access to sensitive information until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.
Found an issue in the description? Have something to add? Feel free to write us 👾