CVE-2017-1787

IBM Publishing Engine 2.1.2 and 6.0.5 contains an undisclosed vulnerability that could allow a local user with administrative privileges to obtain hard coded user credentials. IBM X-Force ID: 137022.

Score

CVSS 3.0 6.7 Medium

Status

Modified - psirt@us.ibm.com

Published

2018-03-02

Last modified

2024-09-17

Weaknesses

CWE-798

Affected products

• Engineering Lifecycle Optimization - Publishing (Ibm)
• Rational Publishing Engine (Ibm)

References

• http://www.ibm.com/support/docview.wss?uid=swg22013961
• http://www.securityfocus.com/bid/103252
• https://exchange.xforce.ibmcloud.com/vulnerabilities/137022