cvelistv5 - cve-2017-1516

CVE-2017-1516 (GCVE-0-2017-1516)

Vulnerability from cvelistv5 – Published: 2018-01-26 21:00 – Updated: 2024-09-16 19:01

Summary

IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 129826.

Severity ?

No CVSS data available.

CWE

Gain Access

Assigner

ibm

References

URL

Tags

	https://exchange.xforce.ibmcloud.com/vulnerabilit…	x_refsource_MISC
	http://www.ibm.com/support/docview.wss?uid=swg22012789	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/102867	vdb-entryx_refsource_BID

Impacted products

	Vendor	Product	Version
	IBM	Rational DOORS	Affected: 9.5 Affected: 9.5.0.1 Affected: 9.5.1 Affected: 9.5.1.1 Affected: 9.5.1.2 Affected: 9.5.2 Affected: 9.5.2.1 Affected: 9.6 Affected: 9.5.0.2 Affected: 9.5.0.3 Affected: 9.5.1.3 Affected: 9.5.1.4 Affected: 9.5.2.2 Affected: 9.5.2.3 Affected: 9.6.0.1 Affected: 9.6.0.2 Affected: 9.6.1 Affected: 9.6.1.1 Affected: 9.5.0.4 Affected: 9.5.1.5 Affected: 9.5.2.4 Affected: 9.6.0.3 Affected: 9.6.1.2 Affected: 9.6.1.3 Affected: 9.6.1.4 Affected: 9.5.0.5 Affected: 9.5.1.6 Affected: 9.5.2.5 Affected: 9.6.0.4 Affected: 9.5.0.6 Affected: 9.5.1.7 Affected: 9.5.2.6 Affected: 9.6.0.5 Affected: 9.6.1.5 Affected: 9.6.1.6 Affected: 9.6.1.7 Affected: 9.5.0.7 Affected: 9.5.1.8 Affected: 9.5.2.7 Affected: 9.6.0.6 Affected: 9.6.1.8 Affected: 9.6.1.9

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T13:32:29.949Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/129826"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
          },
          {
            "name": "102867",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/102867"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Rational DOORS",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "9.5"
            },
            {
              "status": "affected",
              "version": "9.5.0.1"
            },
            {
              "status": "affected",
              "version": "9.5.1"
            },
            {
              "status": "affected",
              "version": "9.5.1.1"
            },
            {
              "status": "affected",
              "version": "9.5.1.2"
            },
            {
              "status": "affected",
              "version": "9.5.2"
            },
            {
              "status": "affected",
              "version": "9.5.2.1"
            },
            {
              "status": "affected",
              "version": "9.6"
            },
            {
              "status": "affected",
              "version": "9.5.0.2"
            },
            {
              "status": "affected",
              "version": "9.5.0.3"
            },
            {
              "status": "affected",
              "version": "9.5.1.3"
            },
            {
              "status": "affected",
              "version": "9.5.1.4"
            },
            {
              "status": "affected",
              "version": "9.5.2.2"
            },
            {
              "status": "affected",
              "version": "9.5.2.3"
            },
            {
              "status": "affected",
              "version": "9.6.0.1"
            },
            {
              "status": "affected",
              "version": "9.6.0.2"
            },
            {
              "status": "affected",
              "version": "9.6.1"
            },
            {
              "status": "affected",
              "version": "9.6.1.1"
            },
            {
              "status": "affected",
              "version": "9.5.0.4"
            },
            {
              "status": "affected",
              "version": "9.5.1.5"
            },
            {
              "status": "affected",
              "version": "9.5.2.4"
            },
            {
              "status": "affected",
              "version": "9.6.0.3"
            },
            {
              "status": "affected",
              "version": "9.6.1.2"
            },
            {
              "status": "affected",
              "version": "9.6.1.3"
            },
            {
              "status": "affected",
              "version": "9.6.1.4"
            },
            {
              "status": "affected",
              "version": "9.5.0.5"
            },
            {
              "status": "affected",
              "version": "9.5.1.6"
            },
            {
              "status": "affected",
              "version": "9.5.2.5"
            },
            {
              "status": "affected",
              "version": "9.6.0.4"
            },
            {
              "status": "affected",
              "version": "9.5.0.6"
            },
            {
              "status": "affected",
              "version": "9.5.1.7"
            },
            {
              "status": "affected",
              "version": "9.5.2.6"
            },
            {
              "status": "affected",
              "version": "9.6.0.5"
            },
            {
              "status": "affected",
              "version": "9.6.1.5"
            },
            {
              "status": "affected",
              "version": "9.6.1.6"
            },
            {
              "status": "affected",
              "version": "9.6.1.7"
            },
            {
              "status": "affected",
              "version": "9.5.0.7"
            },
            {
              "status": "affected",
              "version": "9.5.1.8"
            },
            {
              "status": "affected",
              "version": "9.5.2.7"
            },
            {
              "status": "affected",
              "version": "9.6.0.6"
            },
            {
              "status": "affected",
              "version": "9.6.1.8"
            },
            {
              "status": "affected",
              "version": "9.6.1.9"
            }
          ]
        }
      ],
      "datePublic": "2018-01-23T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim\u0027s click actions and possibly launch further attacks against the victim. IBM X-Force ID: 129826."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Gain Access",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-02-01T10:57:01",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/129826"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
        },
        {
          "name": "102867",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/102867"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@us.ibm.com",
          "DATE_PUBLIC": "2018-01-23T00:00:00",
          "ID": "CVE-2017-1516",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Rational DOORS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "9.5"
                          },
                          {
                            "version_value": "9.5.0.1"
                          },
                          {
                            "version_value": "9.5.1"
                          },
                          {
                            "version_value": "9.5.1.1"
                          },
                          {
                            "version_value": "9.5.1.2"
                          },
                          {
                            "version_value": "9.5.2"
                          },
                          {
                            "version_value": "9.5.2.1"
                          },
                          {
                            "version_value": "9.6"
                          },
                          {
                            "version_value": "9.5.0.2"
                          },
                          {
                            "version_value": "9.5.0.3"
                          },
                          {
                            "version_value": "9.5.1.3"
                          },
                          {
                            "version_value": "9.5.1.4"
                          },
                          {
                            "version_value": "9.5.2.2"
                          },
                          {
                            "version_value": "9.5.2.3"
                          },
                          {
                            "version_value": "9.6.0.1"
                          },
                          {
                            "version_value": "9.6.0.2"
                          },
                          {
                            "version_value": "9.6.1"
                          },
                          {
                            "version_value": "9.6.1.1"
                          },
                          {
                            "version_value": "9.5.0.4"
                          },
                          {
                            "version_value": "9.5.1.5"
                          },
                          {
                            "version_value": "9.5.2.4"
                          },
                          {
                            "version_value": "9.6.0.3"
                          },
                          {
                            "version_value": "9.6.1.2"
                          },
                          {
                            "version_value": "9.6.1.3"
                          },
                          {
                            "version_value": "9.6.1.4"
                          },
                          {
                            "version_value": "9.5.0.5"
                          },
                          {
                            "version_value": "9.5.1.6"
                          },
                          {
                            "version_value": "9.5.2.5"
                          },
                          {
                            "version_value": "9.6.0.4"
                          },
                          {
                            "version_value": "9.5.0.6"
                          },
                          {
                            "version_value": "9.5.1.7"
                          },
                          {
                            "version_value": "9.5.2.6"
                          },
                          {
                            "version_value": "9.6.0.5"
                          },
                          {
                            "version_value": "9.6.1.5"
                          },
                          {
                            "version_value": "9.6.1.6"
                          },
                          {
                            "version_value": "9.6.1.7"
                          },
                          {
                            "version_value": "9.5.0.7"
                          },
                          {
                            "version_value": "9.5.1.8"
                          },
                          {
                            "version_value": "9.5.2.7"
                          },
                          {
                            "version_value": "9.6.0.6"
                          },
                          {
                            "version_value": "9.6.1.8"
                          },
                          {
                            "version_value": "9.6.1.9"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "IBM"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim\u0027s click actions and possibly launch further attacks against the victim. IBM X-Force ID: 129826."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Gain Access"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/129826",
              "refsource": "MISC",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/129826"
            },
            {
              "name": "http://www.ibm.com/support/docview.wss?uid=swg22012789",
              "refsource": "CONFIRM",
              "url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
            },
            {
              "name": "102867",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/102867"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2017-1516",
    "datePublished": "2018-01-26T21:00:00Z",
    "dateReserved": "2016-11-30T00:00:00",
    "dateUpdated": "2024-09-16T19:01:07.973Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:rational_doors:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"9.5.0.0\", \"versionEndIncluding\": \"9.5.0.7\", \"matchCriteriaId\": \"18D8B61D-8C61-47FE-9333-46D3BBC2054E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:rational_doors:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"9.5.1.0\", \"versionEndIncluding\": \"9.5.1.8\", \"matchCriteriaId\": \"D663D277-4979-44F4-8AC4-40C609213859\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:rational_doors:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"9.5.2.0\", \"versionEndIncluding\": \"9.5.2.7\", \"matchCriteriaId\": \"E602E686-F359-4A68-8F2F-85FA40AEDD66\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:rational_doors:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"9.6.0.0\", \"versionEndIncluding\": \"9.6.0.6\", \"matchCriteriaId\": \"0F09A87C-CF16-485D-ACD6-A59836A6693C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:rational_doors:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"9.6.1.0\", \"versionEndIncluding\": \"9.6.1.9\", \"matchCriteriaId\": \"FE5CAEFC-C2D9-45F0-9BD4-2315DEC1DEC3\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim\u0027s click actions and possibly launch further attacks against the victim. IBM X-Force ID: 129826.\"}, {\"lang\": \"es\", \"value\": \"IBM Doors Web Access 9.5 y 9.6 podr\\u00eda permitir que un atacante remoto realizase un secuestro de clic a la v\\u00edctima. Al persuadir a una v\\u00edctima para que visite un sitio web malicioso, un atacante remoto podr\\u00eda explotar esta vulnerabilidad para secuestrar las acciones de clicado de la v\\u00edctima y, probablemente, lanzar m\\u00e1s ataques contra la v\\u00edctima. IBM X-Force ID: 129826.\"}]",
      "id": "CVE-2017-1516",
      "lastModified": "2024-11-21T03:22:00.320",
      "metrics": "{\"cvssMetricV30\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.0\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N\", \"baseScore\": 5.4, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"REQUIRED\", \"scope\": \"CHANGED\", \"confidentialityImpact\": \"LOW\", \"integrityImpact\": \"LOW\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 2.3, \"impactScore\": 2.7}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:S/C:N/I:P/A:N\", \"baseScore\": 3.5, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"SINGLE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"LOW\", \"exploitabilityScore\": 6.8, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": true}]}",
      "published": "2018-01-26T21:29:00.570",
      "references": "[{\"url\": \"http://www.ibm.com/support/docview.wss?uid=swg22012789\", \"source\": \"psirt@us.ibm.com\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/102867\", \"source\": \"psirt@us.ibm.com\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/129826\", \"source\": \"psirt@us.ibm.com\", \"tags\": [\"VDB Entry\", \"Vendor Advisory\"]}, {\"url\": \"http://www.ibm.com/support/docview.wss?uid=swg22012789\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/102867\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/129826\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"VDB Entry\", \"Vendor Advisory\"]}]",
      "sourceIdentifier": "psirt@us.ibm.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-20\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2017-1516\",\"sourceIdentifier\":\"psirt@us.ibm.com\",\"published\":\"2018-01-26T21:29:00.570\",\"lastModified\":\"2025-02-05T18:38:27.383\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim\u0027s click actions and possibly launch further attacks against the victim. IBM X-Force ID: 129826.\"},{\"lang\":\"es\",\"value\":\"IBM Doors Web Access 9.5 y 9.6 podr\u00eda permitir que un atacante remoto realizase un secuestro de clic a la v\u00edctima. Al persuadir a una v\u00edctima para que visite un sitio web malicioso, un atacante remoto podr\u00eda explotar esta vulnerabilidad para secuestrar las acciones de clicado de la v\u00edctima y, probablemente, lanzar m\u00e1s ataques contra la v\u00edctima. IBM X-Force ID: 129826.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N\",\"baseScore\":5.4,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.3,\"impactScore\":2.7}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:S/C:N/I:P/A:N\",\"baseScore\":3.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"LOW\",\"exploitabilityScore\":6.8,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-20\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"9.5.0.0\",\"versionEndIncluding\":\"9.5.0.7\",\"matchCriteriaId\":\"96E0933B-B5DE-4D2D-A618-399EDCA60BEC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"9.5.1.0\",\"versionEndIncluding\":\"9.5.1.8\",\"matchCriteriaId\":\"F5CC40FB-5AFC-4170-87AA-3EA32BC005AD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"9.5.2.0\",\"versionEndIncluding\":\"9.5.2.7\",\"matchCriteriaId\":\"A5749236-FBDA-4CB8-9B0A-B14E74F5D07C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"9.6.0.0\",\"versionEndIncluding\":\"9.6.0.6\",\"matchCriteriaId\":\"DC96FBA4-2236-4ABF-AA1F-655A00D79F56\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"9.6.1.0\",\"versionEndIncluding\":\"9.6.1.9\",\"matchCriteriaId\":\"8E068BAB-D96A-49D0-AE8C-049D76F8CF17\"}]}]}],\"references\":[{\"url\":\"http://www.ibm.com/support/docview.wss?uid=swg22012789\",\"source\":\"psirt@us.ibm.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/102867\",\"source\":\"psirt@us.ibm.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/129826\",\"source\":\"psirt@us.ibm.com\",\"tags\":[\"VDB Entry\",\"Vendor Advisory\"]},{\"url\":\"http://www.ibm.com/support/docview.wss?uid=swg22012789\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/102867\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/129826\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"VDB Entry\",\"Vendor Advisory\"]}]}}"
  }
}

GSD-2017-1516

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

Aliases

CVE-2017-1516

Aliases

CVE-2017-1516

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2017-1516",
    "description": "IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim\u0027s click actions and possibly launch further attacks against the victim. IBM X-Force ID: 129826.",
    "id": "GSD-2017-1516"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2017-1516"
      ],
      "details": "IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim\u0027s click actions and possibly launch further attacks against the victim. IBM X-Force ID: 129826.",
      "id": "GSD-2017-1516",
      "modified": "2023-12-13T01:21:11.483699Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "psirt@us.ibm.com",
        "DATE_PUBLIC": "2018-01-23T00:00:00",
        "ID": "CVE-2017-1516",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Rational DOORS",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "9.5"
                        },
                        {
                          "version_value": "9.5.0.1"
                        },
                        {
                          "version_value": "9.5.1"
                        },
                        {
                          "version_value": "9.5.1.1"
                        },
                        {
                          "version_value": "9.5.1.2"
                        },
                        {
                          "version_value": "9.5.2"
                        },
                        {
                          "version_value": "9.5.2.1"
                        },
                        {
                          "version_value": "9.6"
                        },
                        {
                          "version_value": "9.5.0.2"
                        },
                        {
                          "version_value": "9.5.0.3"
                        },
                        {
                          "version_value": "9.5.1.3"
                        },
                        {
                          "version_value": "9.5.1.4"
                        },
                        {
                          "version_value": "9.5.2.2"
                        },
                        {
                          "version_value": "9.5.2.3"
                        },
                        {
                          "version_value": "9.6.0.1"
                        },
                        {
                          "version_value": "9.6.0.2"
                        },
                        {
                          "version_value": "9.6.1"
                        },
                        {
                          "version_value": "9.6.1.1"
                        },
                        {
                          "version_value": "9.5.0.4"
                        },
                        {
                          "version_value": "9.5.1.5"
                        },
                        {
                          "version_value": "9.5.2.4"
                        },
                        {
                          "version_value": "9.6.0.3"
                        },
                        {
                          "version_value": "9.6.1.2"
                        },
                        {
                          "version_value": "9.6.1.3"
                        },
                        {
                          "version_value": "9.6.1.4"
                        },
                        {
                          "version_value": "9.5.0.5"
                        },
                        {
                          "version_value": "9.5.1.6"
                        },
                        {
                          "version_value": "9.5.2.5"
                        },
                        {
                          "version_value": "9.6.0.4"
                        },
                        {
                          "version_value": "9.5.0.6"
                        },
                        {
                          "version_value": "9.5.1.7"
                        },
                        {
                          "version_value": "9.5.2.6"
                        },
                        {
                          "version_value": "9.6.0.5"
                        },
                        {
                          "version_value": "9.6.1.5"
                        },
                        {
                          "version_value": "9.6.1.6"
                        },
                        {
                          "version_value": "9.6.1.7"
                        },
                        {
                          "version_value": "9.5.0.7"
                        },
                        {
                          "version_value": "9.5.1.8"
                        },
                        {
                          "version_value": "9.5.2.7"
                        },
                        {
                          "version_value": "9.6.0.6"
                        },
                        {
                          "version_value": "9.6.1.8"
                        },
                        {
                          "version_value": "9.6.1.9"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "IBM"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim\u0027s click actions and possibly launch further attacks against the victim. IBM X-Force ID: 129826."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "Gain Access"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/129826",
            "refsource": "MISC",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/129826"
          },
          {
            "name": "http://www.ibm.com/support/docview.wss?uid=swg22012789",
            "refsource": "CONFIRM",
            "url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
          },
          {
            "name": "102867",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/102867"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:ibm:rational_doors:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "9.5.1.8",
                "versionStartIncluding": "9.5.1.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ibm:rational_doors:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "9.5.2.7",
                "versionStartIncluding": "9.5.2.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ibm:rational_doors:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "9.6.0.6",
                "versionStartIncluding": "9.6.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ibm:rational_doors:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "9.6.1.9",
                "versionStartIncluding": "9.6.1.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ibm:rational_doors:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "9.5.0.7",
                "versionStartIncluding": "9.5.0.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@us.ibm.com",
          "ID": "CVE-2017-1516"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim\u0027s click actions and possibly launch further attacks against the victim. IBM X-Force ID: 129826."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-20"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/129826",
              "refsource": "MISC",
              "tags": [
                "VDB Entry",
                "Vendor Advisory"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/129826"
            },
            {
              "name": "http://www.ibm.com/support/docview.wss?uid=swg22012789",
              "refsource": "CONFIRM",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
            },
            {
              "name": "102867",
              "refsource": "BID",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securityfocus.com/bid/102867"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "SINGLE",
            "availabilityImpact": "NONE",
            "baseScore": 3.5,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "version": "2.0"
          },
          "exploitabilityScore": 6.8,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "LOW",
          "userInteractionRequired": true
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.0"
          },
          "exploitabilityScore": 2.3,
          "impactScore": 2.7
        }
      },
      "lastModifiedDate": "2018-02-08T14:44Z",
      "publishedDate": "2018-01-26T21:29Z"
    }
  }
}

FKIE_CVE-2017-1516

Vulnerability from fkie_nvd - Published: 2018-01-26 21:29 - Updated: 2025-02-05 18:38

Severity ?

5.4 (Medium) - CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Summary

References

URL	Tags
psirt@us.ibm.com	http://www.ibm.com/support/docview.wss?uid=swg22012789	Patch, Vendor Advisory
psirt@us.ibm.com	http://www.securityfocus.com/bid/102867	Third Party Advisory, VDB Entry
psirt@us.ibm.com	https://exchange.xforce.ibmcloud.com/vulnerabilities/129826	VDB Entry, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.ibm.com/support/docview.wss?uid=swg22012789	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/102867	Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/129826	VDB Entry, Vendor Advisory

Impacted products

Vendor	Product	Version
ibm	engineering_requirements_management_doors	*
ibm	engineering_requirements_management_doors	*
ibm	engineering_requirements_management_doors	*
ibm	engineering_requirements_management_doors	*
ibm	engineering_requirements_management_doors	*

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "96E0933B-B5DE-4D2D-A618-399EDCA60BEC",
              "versionEndIncluding": "9.5.0.7",
              "versionStartIncluding": "9.5.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F5CC40FB-5AFC-4170-87AA-3EA32BC005AD",
              "versionEndIncluding": "9.5.1.8",
              "versionStartIncluding": "9.5.1.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A5749236-FBDA-4CB8-9B0A-B14E74F5D07C",
              "versionEndIncluding": "9.5.2.7",
              "versionStartIncluding": "9.5.2.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DC96FBA4-2236-4ABF-AA1F-655A00D79F56",
              "versionEndIncluding": "9.6.0.6",
              "versionStartIncluding": "9.6.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8E068BAB-D96A-49D0-AE8C-049D76F8CF17",
              "versionEndIncluding": "9.6.1.9",
              "versionStartIncluding": "9.6.1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim\u0027s click actions and possibly launch further attacks against the victim. IBM X-Force ID: 129826."
    },
    {
      "lang": "es",
      "value": "IBM Doors Web Access 9.5 y 9.6 podr\u00eda permitir que un atacante remoto realizase un secuestro de clic a la v\u00edctima. Al persuadir a una v\u00edctima para que visite un sitio web malicioso, un atacante remoto podr\u00eda explotar esta vulnerabilidad para secuestrar las acciones de clicado de la v\u00edctima y, probablemente, lanzar m\u00e1s ataques contra la v\u00edctima. IBM X-Force ID: 129826."
    }
  ],
  "id": "CVE-2017-1516",
  "lastModified": "2025-02-05T18:38:27.383",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "LOW",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "SINGLE",
          "availabilityImpact": "NONE",
          "baseScore": 3.5,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 6.8,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 5.4,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "privilegesRequired": "LOW",
          "scope": "CHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
          "version": "3.0"
        },
        "exploitabilityScore": 2.3,
        "impactScore": 2.7,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2018-01-26T21:29:00.570",
  "references": [
    {
      "source": "psirt@us.ibm.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
    },
    {
      "source": "psirt@us.ibm.com",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/102867"
    },
    {
      "source": "psirt@us.ibm.com",
      "tags": [
        "VDB Entry",
        "Vendor Advisory"
      ],
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/129826"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/102867"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "VDB Entry",
        "Vendor Advisory"
      ],
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/129826"
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-RRX7-2XRH-3379

Vulnerability from github – Published: 2022-05-14 03:45 – Updated: 2022-05-14 03:45

Details

Severity ?

5.4 (Medium)


                  
                    CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2017-1516"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-20"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2018-01-26T21:29:00Z",
    "severity": "MODERATE"
  },
  "details": "IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim\u0027s click actions and possibly launch further attacks against the victim. IBM X-Force ID: 129826.",
  "id": "GHSA-rrx7-2xrh-3379",
  "modified": "2022-05-14T03:45:43Z",
  "published": "2022-05-14T03:45:43Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-1516"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/129826"
    },
    {
      "type": "WEB",
      "url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/102867"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
      "type": "CVSS_V3"
    }
  ]
}

CNVD-2018-03241

Vulnerability from cnvd - Published: 2018-02-12

Title

IBM Rational DOORS Web Access点击劫持漏洞

Description

IBM Rational DOORS是美国IBM公司的一套用于捕获、跟踪、分析和管理需求的软件。该软件提供了一个用于全球团队协作的单一平台，以便更有效地管理需求，共享统一的用户、服务器和项目管理。IBM Doors Web Access是其中的一个Web端访问程序。 IBM Rational DOORS Web Access存在点击劫持漏洞。远程攻击者可通过说服受害者访问恶意网站利用该漏洞劫持受害者的点击行为，并可能对受害者进一步发动攻击。

Severity

低

Patch Name

IBM Rational DOORS Web Access点击劫持漏洞的补丁

Patch Description

Formal description

厂商已发布漏洞修复程序，请及时关注更新： http://www-01.ibm.com/support/docview.wss?uid=swg22012789

Reference

http://www-01.ibm.com/support/docview.wss?uid=swg22012789 https://www.securityfocus.com/bid/102867

Impacted products

Name
['IBM Rational DOORS >=9.5.0.0，<=9.5.0.7', 'IBM Rational DOORS >=9.5.1.0，<=9.5.1.8', 'IBM Rational DOORS >=9.5.2.0，<=9.5.2.7', 'IBM Rational DOORS >=9.6.0.0，<=9.6.0.6', 'IBM Rational DOORS >=9.6.1.0，<=9.6.1.9']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "102867"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-1516"
    }
  },
  "description": "IBM Rational DOORS\u662f\u7f8e\u56fdIBM\u516c\u53f8\u7684\u4e00\u5957\u7528\u4e8e\u6355\u83b7\u3001\u8ddf\u8e2a\u3001\u5206\u6790\u548c\u7ba1\u7406\u9700\u6c42\u7684\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u63d0\u4f9b\u4e86\u4e00\u4e2a\u7528\u4e8e\u5168\u7403\u56e2\u961f\u534f\u4f5c\u7684\u5355\u4e00\u5e73\u53f0\uff0c\u4ee5\u4fbf\u66f4\u6709\u6548\u5730\u7ba1\u7406\u9700\u6c42\uff0c\u5171\u4eab\u7edf\u4e00\u7684\u7528\u6237\u3001\u670d\u52a1\u5668\u548c\u9879\u76ee\u7ba1\u7406\u3002IBM Doors Web Access\u662f\u5176\u4e2d\u7684\u4e00\u4e2aWeb\u7aef\u8bbf\u95ee\u7a0b\u5e8f\u3002\r\n\r\nIBM Rational DOORS Web Access\u5b58\u5728\u70b9\u51fb\u52ab\u6301\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u8bf4\u670d\u53d7\u5bb3\u8005\u8bbf\u95ee\u6076\u610f\u7f51\u7ad9\u5229\u7528\u8be5\u6f0f\u6d1e\u52ab\u6301\u53d7\u5bb3\u8005\u7684\u70b9\u51fb\u884c\u4e3a\uff0c\u5e76\u53ef\u80fd\u5bf9\u53d7\u5bb3\u8005\u8fdb\u4e00\u6b65\u53d1\u52a8\u653b\u51fb\u3002",
  "discovererName": "IBM",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttp://www-01.ibm.com/support/docview.wss?uid=swg22012789",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-03241",
  "openTime": "2018-02-12",
  "patchDescription": "IBM Rational DOORS\u662f\u7f8e\u56fdIBM\u516c\u53f8\u7684\u4e00\u5957\u7528\u4e8e\u6355\u83b7\u3001\u8ddf\u8e2a\u3001\u5206\u6790\u548c\u7ba1\u7406\u9700\u6c42\u7684\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u63d0\u4f9b\u4e86\u4e00\u4e2a\u7528\u4e8e\u5168\u7403\u56e2\u961f\u534f\u4f5c\u7684\u5355\u4e00\u5e73\u53f0\uff0c\u4ee5\u4fbf\u66f4\u6709\u6548\u5730\u7ba1\u7406\u9700\u6c42\uff0c\u5171\u4eab\u7edf\u4e00\u7684\u7528\u6237\u3001\u670d\u52a1\u5668\u548c\u9879\u76ee\u7ba1\u7406\u3002IBM Doors Web Access\u662f\u5176\u4e2d\u7684\u4e00\u4e2aWeb\u7aef\u8bbf\u95ee\u7a0b\u5e8f\u3002\r\n\r\nIBM Rational DOORS Web Access\u5b58\u5728\u70b9\u51fb\u52ab\u6301\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u8bf4\u670d\u53d7\u5bb3\u8005\u8bbf\u95ee\u6076\u610f\u7f51\u7ad9\u5229\u7528\u8be5\u6f0f\u6d1e\u52ab\u6301\u53d7\u5bb3\u8005\u7684\u70b9\u51fb\u884c\u4e3a\uff0c\u5e76\u53ef\u80fd\u5bf9\u53d7\u5bb3\u8005\u8fdb\u4e00\u6b65\u53d1\u52a8\u653b\u51fb\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "IBM Rational DOORS Web Access\u70b9\u51fb\u52ab\u6301\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "IBM Rational DOORS \u003e=9.5.0.0\uff0c\u003c=9.5.0.7",
      "IBM Rational DOORS \u003e=9.5.1.0\uff0c\u003c=9.5.1.8",
      "IBM Rational DOORS \u003e=9.5.2.0\uff0c\u003c=9.5.2.7",
      "IBM Rational DOORS \u003e=9.6.0.0\uff0c\u003c=9.6.0.6",
      "IBM Rational DOORS \u003e=9.6.1.0\uff0c\u003c=9.6.1.9"
    ]
  },
  "referenceLink": "http://www-01.ibm.com/support/docview.wss?uid=swg22012789\r\nhttps://www.securityfocus.com/bid/102867",
  "serverity": "\u4f4e",
  "submitTime": "2018-01-29",
  "title": "IBM Rational DOORS Web Access\u70b9\u51fb\u52ab\u6301\u6f0f\u6d1e"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2017-1516 (GCVE-0-2017-1516)

GSD-2017-1516

FKIE_CVE-2017-1516

GHSA-RRX7-2XRH-3379

CNVD-2018-03241

Tags

Sightings

Nomenclature