CVE-2017-1441 Information disclosure in Emptoris Services Procurement

Medium 5.5 Published 30 Aug 2017 Updated 17 Sep 2024

A local user can view sensitive information stored locally due to improper access control in IBM Emptoris Services Procurement.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2017-1441?

CVE-2017-1441 is a medium-severity vulnerability in IBM Emptoris Services Procurement, published on 30 Aug 2017. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

IBM Emptoris Services Procurement 10.0.0.5 could allow a local user to view sensitive information stored locally due to improper access control. IBM X-Force ID: 128106.

Which versions are affected by CVE-2017-1441?

It affects 1 product.

Products include Ibm Emptoris Services Procurement.

How do I fix CVE-2017-1441?

No fix has been published for CVE-2017-1441 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-1441 being exploited?

There is no known exploitation of CVE-2017-1441 in the wild and no public exploit code.

Sources

Also known as GHSA-prmq-9c7g-7r3c.