Security Bulletin: IBM TRIRIGA Application Platform Reports Privilege Escalation (CVE-2017-1373)

Summary IBM TRIRIGA Application Platform Reports are vulnerable to a privilege escalation attack. Vulnerability Details CVEID: CVE-2017-1373 DESCRIPTION: Reports executed in the IBM TRIRIGA Application platform contains a vulnerability that could allow an authenticated user to execute a report th...

CVE-2017-1373

CVE-2017-1373 affects IBM TRIRIGA Application Platform 3.3 to 3.5, enabling an authenticated user to run a report they should not access (privilege escalation). The IBM Security Bulletin confirms the impact and lists affected versions: 3.3.0–3.3.2.x, 3.4.0–3.4.2.x, 3.5.0–3.5.2.x, with CVSS v3.0 b...

Virtuozzo Linux Errata and Bugfix Advisory 2017:1373

Upstream security update. Follow RHBA-2017-1373 for details...