Lucene search
IbmCVELIST:CVE-2021-39017HistoryJul 14, 2022 - 4:15 p.m.
CVE-2021-39017
2022-07-1416:15:36
ibm
www.cve.org
2
ibm
engineering lifecycle
optimization
publishing
security vulnerability
access controls
remote attacker
arbitrary files
ibm x-force id
CVSS3
5.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
EPSS
0.001
Percentile
35.5%
IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to upload arbitrary files, caused by improper access controls. IBM X-Force ID: 213725.
CNA Affected
[
{
"product": "Engineering Lifecycle Optimization Publishing",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "6.0.6"
},
{
"status": "affected",
"version": "6.0.6.1"
},
{
"status": "affected",
"version": "7.0"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.2"
}
]
}
]Related
ibm
ibm
nvd
nvd
CVE-2021-39017
2022-07-14 17:15:08
cve
cve
CVE-2021-39017
2022-07-14 17:15:08
prion
prion
Improper access control
2022-07-14 17:15:00
CVSS3
5.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
EPSS
0.001
Percentile
35.5%
Related for CVELIST:CVE-2021-39017