Description

IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to obtain sensitive information from a specially crafted HTTP request that could be used to aid future attacks. IBM X-Force ID: 129970.

Remediation

References

CVE-2017-1524

Related Vulnerabilities

WordPress Plugin Bliss Gallery 'upload.php' Arbitrary File Upload (2.1)

WordPress Plugin YITH Desktop Notifications for WooCommerce Security Bypass (1.2.7)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-14726)

WordPress Plugin Livemesh SiteOrigin Widgets Security Bypass (2.5.1)

Apache HTTP Server Other Vulnerability (CVE-2013-4352)

Severity

Medium

Classification

CVE-2017-1524 CWE-200 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities