IBM7B7DCC39D8B3F35FBD7A000164C2C55BEB4A36A396A894A51F65C62A9280E7E1Security Bulletin: A security vulnerability has been identified in Websphere Application Server shipped with Predictive Customer Intelligence (CVE-2017-1194)
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
Summary
Websphere Application Server is shipped with Predictive Customer Intelligence. Information about a security vulnerability affecting Websphere Application Server has been published in a security bulletin.
Vulnerability Details
Please consult the security bulletin Security Bulletin: Cross-site request forgery in WebSphere Application Server (CVE-2017-1194) for vulnerability details and information about fixes.
Affected Products and Versions
Predictive Customer Intelligence versions 1.0, 1.0.1, 1.1, 1.1.1
Remediation/Fixes
Refer to the following security bulletins for vulnerability details and information about fixes addressed by Websphere Application Server which is shipped with Predictive Customer Intelligence.
| Principal Product and Version(s) | Affected Supporting Product and Version | Affected Supporting Product Security Bulletin |
|---|---|---|
| Predictive Customer Intelligence 1.0 and 1.0.1 | Websphere Application Server 8.5.5 | Security Bulletin: Cross-site request forgery in WebSphere Application Server (CVE-2017-1194) |
| Predictive Customer Intelligence 1.1 and 1.1.1 | Websphere Application Server 8.5.5.6 | Security Bulletin: Cross-site request forgery in WebSphere Application Server (CVE-2017-1194) |
Related
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P