Security Bulletin: IBM MDM Software report download without authentication affects IBM InfoSphere Master Data Management Collaboration Server

Summary

IBM InfoSphere Master Data Management - Collaborative Edition could allow an unauthorized user to download reports without authentication

Vulnerability Details

CVEID: CVE-2017-1523**
DESCRIPTION:** IBM InfoSphere Master Data Management - Collaborative Edition could allow an unauthorized user to download reports without authentication.
CVSS Base Score: 5.3
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/129892 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

Affected Products and Versions

Affected IBM InfoSphere Master Data Management - Collaborative Edition

|

Affected Versions

—|—
IBM InfoSphere Master Data Management - Collaborative Edition| 11.5

Remediation/Fixes

The recommended solution is to apply the fix as soon as practical. Please see below for information on the fix available.

Workarounds and Mitigations

None