{"containers": {"cna": {"affected": [{"product": "OpenPages GRC Platform", "vendor": "IBM", "versions": [{"status": "affected", "version": "7.1"}, {"status": "affected", "version": "7.2"}, {"status": "affected", "version": "7.3"}]}], "datePublic": "2017-10-27T00:00:00", "descriptions": [{"lang": "en", "value": "IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow an unauthenticated user to obtain sensitive information about the server that could be used in future attacks against the system. IBM X-Force ID: 126241."}], "problemTypes": [{"descriptions": [{"description": "Obtain Information", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-11-03T18:57:01", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/126241"}, {"name": "101656", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/101656"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.ibm.com/support/docview.wss?uid=swg21997796"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@us.ibm.com", "DATE_PUBLIC": "2017-10-27T00:00:00", "ID": "CVE-2017-1333", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "OpenPages GRC Platform", "version": {"version_data": [{"version_value": "7.1"}, {"version_value": "7.2"}, {"version_value": "7.3"}]}}]}, "vendor_name": "IBM"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow an unauthenticated user to obtain sensitive information about the server that could be used in future attacks against the system. IBM X-Force ID: 126241."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Obtain Information"}]}]}, "references": {"reference_data": [{"name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/126241", "refsource": "MISC", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/126241"}, {"name": "101656", "refsource": "BID", "url": "http://www.securityfocus.com/bid/101656"}, {"name": "http://www.ibm.com/support/docview.wss?uid=swg21997796", "refsource": "CONFIRM", "url": "http://www.ibm.com/support/docview.wss?uid=swg21997796"}]}}}}, "cveMetadata": {"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2017-1333", "datePublished": "2017-10-27T00:00:00", "dateReserved": "2016-11-30T00:00:00", "dateUpdated": "2017-11-03T18:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:openpages_grc_platform:7.1.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "6A1371BD-17B2-4FA4-B5AA-B5A35F283277", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:openpages_grc_platform:7.1.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "C0D85B86-EC7C-419C-9612-F869CC1FA243", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:openpages_grc_platform:7.1.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "6CF38915-A265-4B38-B40F-455D36690647", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:openpages_grc_platform:7.1.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "45448B60-3854-48EC-9675-E34C2B0A0C6F", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:openpages_grc_platform:7.2.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "BA2AF5B5-2E58-4AC4-8454-684FD2EE1515", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:openpages_grc_platform:7.2.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "64BD759E-E782-4FB5-91FE-48EAEF181644", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:openpages_grc_platform:7.2.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "285AFA31-E4C0-406D-9DC7-95A452F64515", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:openpages_grc_platform:7.2.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "33A19D8D-254D-4CB2-BBDB-BC470AC99CD1", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:openpages_grc_platform:7.2.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "2BB9C6E8-68A1-4EA6-BEA6-2C64ACCB1159", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:openpages_grc_platform:7.3.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "6851C762-82A7-42B8-982B-AAAD9B467826", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow an unauthenticated user to obtain sensitive information about the server that could be used in future attacks against the system. IBM X-Force ID: 126241."}, {"lang": "es", "value": "La plataforma OpenPages GRC de IBM, en sus versiones 7.1, 7.2 y 7.3 podr\u00eda permitir que un usuario no autenticado obtenga informaci\u00f3n sensible sobre el servidor que podr\u00eda utilizarse en futuros ataques contra el sistema. IBM X-Force ID: 126241."}], "id": "CVE-2017-1333", "lastModified": "2017-11-16T17:13:42.270", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-11-01T21:29:00.497", "references": [{"source": "psirt@us.ibm.com", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.ibm.com/support/docview.wss?uid=swg21997796"}, {"source": "psirt@us.ibm.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/101656"}, {"source": "psirt@us.ibm.com", "tags": ["VDB Entry", "Vendor Advisory"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/126241"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}