CVE-2017-1124

LOW Year: 2017
CVSS v3 Score
2.9
Low
CVSS v2 Score
1.9
Low
Weakness Type
CWE-200
View all →

Vulnerability Description

IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local attacker to obtain sensitive information using HTTP Header Injection. IBM Reference #: 1998053.

Related Vulnerabilities

CVE-2016-4740

LOW
CVSS:2.9(Low)

Apple iOS before 10, when Handoff for Messages is used, does not ensure that a Messages signin has occurred before displaying messages, which might allow attackers to obtain sensitive information via ...

CWE-2002016

CVE-2011-3147

LOW
CVSS:2.8(Low)

Versions of nova before 2012.1 could expose hypervisor host files to a guest operating system when processing a maliciously constructed qcow filesystem.

CWE-2002011

CVE-2016-3251

LOW
CVSS:2.8(Low)

The GDI component in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Window...

CWE-2002016

CVE-2016-3272

LOW
CVSS:2.8(Low)

The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mishandles page-fault system calls, which allows local users to obtain sensitive info...

CWE-2002016

CVE-2016-2947

LOW
CVSS:2.7(Low)

IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18,...

CWE-2002016

CVE-2016-3021

LOW
CVSS:2.7(Low)

IBM Security Access Manager for Web could allow an authenticated attacker to obtain sensitive information from error message using a specially crafted HTTP request.

CWE-2002016