CVE Feed

    Dashboard / CVE / CVE-2017-1309

    CVE-2017-1309

    IBM InfoSphere Master Data Management Server 11.0 - 11.6 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 125463.

    Published:Jul 19, 2017
    Last Modified:Apr 20, 2025
    EPS:Jul 19, 2017
    EPSS Score:0.00024
    CVSS Score:7.8

    Affected Products

    Vendor
    Ibm
    Product
    Infosphere Master Data Management Server

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-37 Retrieve Embedded Sensitive Data

    Related CVEs

    CVE-2023-46187 (CVSS 5.4) — IBM InfoSphere Master Data Management 11.6, 12.0, and 14.0 is vulnerable to stored cross-site scripting. This …
    CVE-2020-4675 (CVSS 6.5) — IBM InfoSphere Master Data Management Server 11.6 is vulnerable to cross-site request forgery which could allo…
    CVE-2017-1199 (CVSS 5.4) — IBM InfoSphere Master Data Management Server 10.0, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-sit…
    CVE-2016-9716 (CVSS 8.8) — IBM InfoSphere Master Data Management Server 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site requ…
    CVE-2016-9719 (CVSS 5.7) — IBM InfoSphere Master Data Management Server 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 could allow a remote attac…
    CVE-2016-9715 (CVSS 5.4) — IBM InfoSphere Master Data Management Server 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scri…
    CVE-2016-9714 (CVSS 8.8) — IBM InfoSphere Master Data Management Server 10.1, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-sit…
    CVE-2016-9717 (CVSS 6.5) — HTTP Parameter Override is identified in the IBM Infosphere Master Data Management (MDM) 10.1. 11.0. 11.3, 11.…
    CVE-2016-9718 (CVSS 5.4) — IBM InfoSphere Master Data Management Server 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-sit…
    CVE-2015-1945 (CVSS 6.5) — Unspecified vulnerability in the Reference Data Management component in IBM InfoSphere Master Data Management …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High