CVE-2017-1545: IBM Doors Web Access 9.5 and 9.6 could allow an attacker with physical access to the system to log into the application using previously stored credentials

Medium severity · published Jan 26, 2018

CVE-2017-1545

IBM Doors Web Access 9.5 and 9.6 could allow an attacker with physical access to the system to log into the application using previously stored credentials

6.8

CVSS

0.4%

EPSS

On KEV

Description

IBM Doors Web Access 9.5 and 9.6 could allow an attacker with physical access to the system to log into the application using previously stored credentials. IBM X-Force ID: 130914.

CVSS vector

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector

Physical

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.4% · higher than 37% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Engineering Requirements Management Doors · Ibm

9.5.0.0 through 9.5.0.7; 9.5.1.0 through 9.5.1.8; 9.5.2.0 through 9.5.2.7; 9.6.0.0 through 9.6.0.6; 9.6.1.0 through 9.6.1.9 · source: NVD

Affected product

Engineering Requirements Management Doors

Ibm

All Engineering Requirements Management Doors CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2017-1545

CVE.org

https://www.cve.org/CVERecord?id=CVE-2017-1545

Patch

http://www.ibm.com/support/docview.wss?uid=swg22012789

Third Party Advisory

http://www.securityfocus.com/bid/102896

VDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/130914

More from Engineering Requirements Management Doors

9.8

CVE-2018-1457

An undisclosed vulnerability in IBM Rational DOORS 9.5.1 through 9.6.1.10 application allows an attacker to gain DOORS administrator privileges

8.2

CVE-2023-50304

IBM Engineering Requirements Management DOORS Web Access 9.7.2.8 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data

8.1

CVE-2024-41787

IBM Engineering Requirements Management DOORS Next code execution

7.5

CVE-2024-41771

IBM Engineering Requirements Management DOORS Next information disclosure

7.5

CVE-2024-41770

IBM Engineering Requirements Management DOORS Next information disclosure