CVE-2017-1346

IBM Business Process Manager 7.5, 8.0, and 8.5 temporarily stores files in a temporary folder during offline installs which could be read by a local user within a short timespan. IBM X-Force ID: 126461.

Score

CVSS 3.0 2.5 Low

Status

Modified - psirt@us.ibm.com

Published

2017-09-25

Last modified

2024-08-05

Weaknesses

CWE-200, CWE-362

Affected products

• Business Process Manager (Ibm)

References

• http://www.ibm.com/support/docview.wss?uid=swg22004654
• http://www.securityfocus.com/bid/100964
• https://exchange.xforce.ibmcloud.com/vulnerabilities/126461