4.4
Medium
CVE-2017-1787 IBM Publishing Engine 2.1.2 and 6.0.5 contains an undisclosed vulnerability that could allow a local user with…
Description
IBM Publishing Engine 2.1.2 and 6.0.5 contains an undisclosed vulnerability that could allow a local user with administrative privileges to obtain hard coded user credentials. IBM X-Force ID: 137022.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Rational Publishing Engine | 6.0.5 | No fix stated |
| Rational Publishing Engine | 2.1.2 | No fix stated |
Other CVEs of Rational Publishing Engine
The 7 CVEs of Rational Publishing Engine →
CVE-2020-4316
IBM Publishing Engine 6.0.6, 6.0.6.1, and 7.0 does not set the secure attribute on authorization tokens or session…
4.3
Medium
CVE-2019-4431
IBM Rational Publishing Engine 6.0.6 and 6.0.6.1 is vulnerable to cross-site scripting
5.4
Medium
CVE-2018-1657
IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting
5.4
Medium
CVE-2018-1951
IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting
5.4
Medium