Security Bulletin: BigInsights is affected by multiple vulnerabilities in BigSheets and Data Server Manager (CVE-2017-1552, CVE-2017-1553, CVE-2017-1554)

Summary BigInsights is affected by multiple UI vulnerabilities in BigSheets and Data Server Manager DSM Vulnerability Details CVEID: CVE-2017-1552 DESCRIPTION: IBM Infosphere BigInsights is vulnerable to link injection. By persuading a victim to click on a specially-crafted URL link, a remote...

CVE-2017-1553

IBM Infosphere BigInsights exposes a cross‑site scripting vulnerability (CVE-2017-1553) in Web UI affecting versions 4.2.0 and 4.2.5. The issue allows embedding arbitrary JavaScript in the UI, potentially leading to credentials disclosure within a trusted session. Public details in connected sour...