Files
vuln-nvd/data/2017/CVE-2017-1516.json
T

2 lines
5.8 KiB
JSON

{"affected":[{"affectedData":[{"product":"Rational DOORS","vendor":"IBM","versions":[{"status":"affected","version":"9.5"},{"status":"affected","version":"9.5.0.1"},{"status":"affected","version":"9.5.1"},{"status":"affected","version":"9.5.1.1"},{"status":"affected","version":"9.5.1.2"},{"status":"affected","version":"9.5.2"},{"status":"affected","version":"9.5.2.1"},{"status":"affected","version":"9.6"},{"status":"affected","version":"9.5.0.2"},{"status":"affected","version":"9.5.0.3"},{"status":"affected","version":"9.5.1.3"},{"status":"affected","version":"9.5.1.4"},{"status":"affected","version":"9.5.2.2"},{"status":"affected","version":"9.5.2.3"},{"status":"affected","version":"9.6.0.1"},{"status":"affected","version":"9.6.0.2"},{"status":"affected","version":"9.6.1"},{"status":"affected","version":"9.6.1.1"},{"status":"affected","version":"9.5.0.4"},{"status":"affected","version":"9.5.1.5"},{"status":"affected","version":"9.5.2.4"},{"status":"affected","version":"9.6.0.3"},{"status":"affected","version":"9.6.1.2"},{"status":"affected","version":"9.6.1.3"},{"status":"affected","version":"9.6.1.4"},{"status":"affected","version":"9.5.0.5"},{"status":"affected","version":"9.5.1.6"},{"status":"affected","version":"9.5.2.5"},{"status":"affected","version":"9.6.0.4"},{"status":"affected","version":"9.5.0.6"},{"status":"affected","version":"9.5.1.7"},{"status":"affected","version":"9.5.2.6"},{"status":"affected","version":"9.6.0.5"},{"status":"affected","version":"9.6.1.5"},{"status":"affected","version":"9.6.1.6"},{"status":"affected","version":"9.6.1.7"},{"status":"affected","version":"9.5.0.7"},{"status":"affected","version":"9.5.1.8"},{"status":"affected","version":"9.5.2.7"},{"status":"affected","version":"9.6.0.6"},{"status":"affected","version":"9.6.1.8"},{"status":"affected","version":"9.6.1.9"}]}],"source":"psirt@us.ibm.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*","matchCriteriaId":"96E0933B-B5DE-4D2D-A618-399EDCA60BEC","versionEndIncluding":"9.5.0.7","versionStartIncluding":"9.5.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*","matchCriteriaId":"F5CC40FB-5AFC-4170-87AA-3EA32BC005AD","versionEndIncluding":"9.5.1.8","versionStartIncluding":"9.5.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*","matchCriteriaId":"A5749236-FBDA-4CB8-9B0A-B14E74F5D07C","versionEndIncluding":"9.5.2.7","versionStartIncluding":"9.5.2.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*","matchCriteriaId":"DC96FBA4-2236-4ABF-AA1F-655A00D79F56","versionEndIncluding":"9.6.0.6","versionStartIncluding":"9.6.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:engineering_requirements_management_doors:*:*:*:*:*:*:*:*","matchCriteriaId":"8E068BAB-D96A-49D0-AE8C-049D76F8CF17","versionEndIncluding":"9.6.1.9","versionStartIncluding":"9.6.1.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 129826."},{"lang":"es","value":"IBM Doors Web Access 9.5 y 9.6 podría permitir que un atacante remoto realizase un secuestro de clic a la víctima. Al persuadir a una víctima para que visite un sitio web malicioso, un atacante remoto podría explotar esta vulnerabilidad para secuestrar las acciones de clicado de la víctima y, probablemente, lanzar más ataques contra la víctima. IBM X-Force ID: 129826."}],"id":"CVE-2017-1516","lastModified":"2026-06-17T01:14:30.120","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"SINGLE","availabilityImpact":"NONE","baseScore":3.5,"confidentialityImpact":"NONE","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","version":"2.0"},"exploitabilityScore":6.8,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","version":"3.0"},"exploitabilityScore":2.3,"impactScore":2.7,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2018-01-26T21:29:00.570","references":[{"source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"],"url":"http://www.ibm.com/support/docview.wss?uid=swg22012789"},{"source":"psirt@us.ibm.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/102867"},{"source":"psirt@us.ibm.com","tags":["VDB Entry","Vendor Advisory"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/129826"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"http://www.ibm.com/support/docview.wss?uid=swg22012789"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/102867"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry","Vendor Advisory"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/129826"}],"sourceIdentifier":"psirt@us.ibm.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-20"}],"source":"nvd@nist.gov","type":"Primary"}]}