CVE-2017-1624

CVSS v3 Score
5.4
Medium
CVSS v2 Score
5.5
Medium

Vulnerability Description

IBM QRadar 7.3 and 7.3.1 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 133122.

CVSS:5.4(Medium)

IBM Security Guardium 10.0 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 124741.

CVSS:5.4(Medium)

IBM Security Guardium Big Data Intelligence (SonarG) 3.1 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Fo...

CVSS:5.4(Medium)

An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The ASP.NET_SessionID primary session cookie, when Internet Information Services (IIS) with ASP.NET is used, is not protected wit...

CVSS:5.4(Medium)

cPanel before 71.9980.37 allows attackers to make API calls that bypass the backup feature restriction (SEC-429).

CVSS:5.4(Medium)

An issue was discovered in GitLab Community and Enterprise Edition 10.8 through 12.2.1. An internal endpoint unintentionally allowed group maintainers to view and edit group runner settings.

CVSS:5.4(Medium)

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC505 before 8.0.6.4 and WAC510 before 8.0.6.4.