National Vulnerability Database

National Vulnerability Database

National Vulnerability
Database

Vulnerability Change Record for CVE-2017-1407

Change History

Initial Analysis - 10/6/2017 12:29:49 PM

Action Type Old Value New Value
Changed Reference Type
http://www.ibm.com/support/docview.wss?uid=swg22007377 No Types Assigned
http://www.ibm.com/support/docview.wss?uid=swg22007377 Patch, Vendor Advisory
Changed Reference Type
http://www.securityfocus.com/bid/101015 No Types Assigned
http://www.securityfocus.com/bid/101015 Third Party Advisory, VDB Entry
Changed Reference Type
https://exchange.xforce.ibmcloud.com/vulnerabilities/127394 No Types Assigned
https://exchange.xforce.ibmcloud.com/vulnerabilities/127394 Vendor Advisory
Added CWE
CWE-77
Added CVSS V2
(AV:N/AC:L/Au:S/C:C/I:C/A:C)
Added CVSS V3
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Added CPE Configuration
OR
     *cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2:*:*:*:*:*:*:*
     *cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.1:*:*:*:*:*:*:*
     *cpe:2.3:a:ibm:security_identity_manager:6.0.0.0:*:*:*:*:*:*:*
     *cpe:2.3:a:ibm:security_identity_manager:7.0.0.0:*:*:*:*:*:*:*
     *cpe:2.3:a:ibm:security_privileged_identity_manager:2.0:*:*:*:*:*:*:*
     *cpe:2.3:a:ibm:security_privileged_identity_manager:2.0.1:*:*:*:*:*:*:*
     *cpe:2.3:a:ibm:security_privileged_identity_manager:2.0.2:*:*:*:*:*:*:*