Lucene search

MitreCVE-2002-1731

HistoryJun 21, 2005 - 4:00 a.m.

CVE-2002-1731

2005-06-2104:00:00

mitre

web.nvd.nist.gov

cve

ibm as/400

system request menu

user accounts

object names

usrprf

information security

nvd

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

Percentile

0.4%

JSON

The System Request menu in IBM AS/400 allows local users to list valid user accounts by viewing the object names that are type USRPRF.

Affected configurations

Nvd

Node

ibmos_400Matchv4r2

ibmos_400Matchv4r3

ibmos_400Matchv4r4

ibmos_400Matchv4r5

ibmos_400Matchv5r1

VendorProductVersionCPE
ibmos_400v4r2cpe:2.3:o:ibm:os_400:v4r2:*:*:*:*:*:*:*
ibmos_400v4r3cpe:2.3:o:ibm:os_400:v4r3:*:*:*:*:*:*:*
ibmos_400v4r4cpe:2.3:o:ibm:os_400:v4r4:*:*:*:*:*:*:*
ibmos_400v4r5cpe:2.3:o:ibm:os_400:v4r5:*:*:*:*:*:*:*
ibmos_400v5r1cpe:2.3:o:ibm:os_400:v5r1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	os_400	v4r2	cpe:2.3:o:ibm:os_400:v4r2:::::::*
ibm	os_400	v4r3	cpe:2.3:o:ibm:os_400:v4r3:::::::*
ibm	os_400	v4r4	cpe:2.3:o:ibm:os_400:v4r4:::::::*
ibm	os_400	v4r5	cpe:2.3:o:ibm:os_400:v4r5:::::::*
ibm	os_400	v5r1	cpe:2.3:o:ibm:os_400:v5r1:::::::*

References

securitytracker.com/id?1003507

www.securityfocus.com/bid/4059

exchange.xforce.ibmcloud.com/vulnerabilities/8179

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

Percentile

0.4%

JSON

Related for CVE-2002-1731