1051 matches found
CVE-2017-1669
IBM Tivoli Key Lifecycle Manager (SKLM) versions 2.5–2.7 store sensitive information in URL parameters, enabling potential information disclosure if URLs are captured in server logs, referer headers, or browser history. Underlying cause is storing sensitive data in URL parameters. Affected versio...
CVE-2017-1669: Exposure of Sensitive Information to an Unauthorized Actor
IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 133636...
PT-2018-6305
Name of the Vulnerable Software and Affected Versions: IBM Tivoli Key Lifecycle Manager versions 2.5 through 2.7 Description: The issue allows for potential information disclosure due to sensitive information being stored in URL parameters. If unauthorized parties gain access to the URLs through...
CVE-2017-1355
IBM Atlas eDiscovery Process Management 6.0.3 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 126682...
CVE-2017-1355
IBM Atlas eDiscovery Process Management 6.0.3 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 126682...
CVE-2017-1355
IBM Atlas eDiscovery Process Management 6.0.3 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 126682...
CVE-2017-1355
IBM Atlas eDiscovery Process Management stores sensitive information in URL parameters, enabling potential information disclosure via server logs, referrers, or browser history. Affected: 6.0.3 through 6.0.3.5. CVSS v3 base 3.7. Remediation: upgrade to 6.0.3 Fix Pack 6 (6.0.3 FP6).
CVE-2017-1355: Exposure of Sensitive Information to an Unauthorized Actor
IBM Atlas eDiscovery Process Management 6.0.3 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 126682...
PT-2017-12988
Name of the Vulnerable Software and Affected Versions IBM Atlas eDiscovery Process Management version 6.0.3 Description The issue concerns the storage of sensitive information in URL parameters, which could lead to information disclosure if unauthorized parties gain access to the URLs through...
IBM Atlas eDiscovery Process Management Information Disclosure Vulnerability
IBM Atlas eDiscovery Process Management is a product within the Information Lifecycle Governance solution from IBM USA that is used to help attorneys, paralegals, and evidence supervisors rigorously and logically manage legal evidence retention workflows. An information disclosure vulnerability...
CVE-2017-1225
IBM Tivoli Endpoint Manager IBM BigFix Platform 9.2 and 9.5 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123904...
Information disclosure
IBM Tivoli Endpoint Manager IBM BigFix Platform 9.2 and 9.5 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123904...
CVE-2017-1225
IBM Tivoli Endpoint Manager IBM BigFix Platform 9.2 and 9.5 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123904...
CVE-2017-1225
IBM Tivoli Endpoint Manager IBM BigFix Platform 9.2 and 9.5 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123904...
CVE-2017-1225
CVE-2017-1225 affects IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.2.x before 9.2.12 and 9.5.x before 9.5.7. The issue is information disclosure caused by sensitive data in URL parameters, which can be exposed via server logs, referrer headers, or browser history. Remediation suggeste...
PT-2017-12425
Name of the Vulnerable Software and Affected Versions IBM Tivoli Endpoint Manager IBM BigFix Platform versions 9.2 through 9.5 Description The issue concerns the storage of sensitive information in URL parameters, potentially leading to information disclosure if unauthorized parties access the UR...
CVE-2017-1225: Exposure of Sensitive Information to an Unauthorized Actor
IBM Tivoli Endpoint Manager IBM BigFix Platform 9.2 and 9.5 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123904...
Cross-Site Scripting (XSS)
woocommerce is vulnerable to cross-site scripting XSS attacks. The attacks can be launched because URL parameters are not escpaed properly...
Generic HTTP Directory Traversal / File Inclusion (Web Application URL Parameter) - Active Check
Generic check for HTTP directory traversal / file inclusion vulnerabilities within URL parameters of the remote web application. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...