Description

IBM RSA DM (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to access settings that they should not be able to using a specially crafted URL. IBM X-Force ID: 132625.

Remediation

References

CVE-2017-1602

Related Vulnerabilities

WordPress Plugin WordPress Simple Ecommerce Shopping Cart-Sell products through Paypal Arbitrary File Upload (2.2.5)

Joomla Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2008-3227)

WebLogic Out-of-bounds Write Vulnerability (CVE-2020-36518)

Drupal Core 7.x Multiple Vulnerabilities (7.0)

Drupal Core 8.9.x Arbitrary File Overwrite (8.9.0 - 8.9.12)

Severity

Medium

Classification

CVE-2017-1602 CWE-552 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities