Skip to content
Sign in
Not rated

CVE-2017-1308 IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0 could allow an authenticated attacker to download…

Description

IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0 could allow an authenticated attacker to download files they should not have access to due to improper access controls. IBM X-Force ID: 125462.

Affected products and versions

Product Affected versions Fixed in
Daeja ViewONE 5.0 No fix stated
Daeja ViewONE 4.1.5.1 No fix stated

Other CVEs of Daeja ViewONE

The 9 CVEs of Daeja ViewONE →
CVE-2019-4456 IBM Daeja ViewONE Professional, Standard & Virtual 5.0.5 and 5.0.6 is vulnerable to an XML External Entity Injection… 7.1 High CVE-2019-4260 IBM Daeja ViewONE Professional, Standard & Virtual 5.0 through 5.0.5 could allow an unauthorized user to download server… 5.3 Medium CVE-2018-1835 IBM Daeja ViewONE Professional, Standard & Virtual 5 is vulnerable to a XML External Entity Injection (XXE) attack… 7.1 High CVE-2018-1399 IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5 and 5.0 is vulnerable to cross-site scripting Not rated
Track this CVE