High severity · published Dec 20, 2017
CVE-2017-1694
IBM Integration Bus 9.0 and 10.0 transmits user credentials in plain in clear text which can be read by an attacker using man in the middle techniques
8.1
CVSS
0.8%
EPSS
No
On KEV
Description
IBM Integration Bus 9.0 and 10.0 transmits user credentials in plain in clear text which can be read by an attacker using man in the middle techniques. IBM X-Force ID: 134165.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 57% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IB
Integration Bus · Ibm
9.0.0.0; 9.0.0.1; 9.0.0.2; 9.0.0.3; 9.0.0.4; 9.0.0.5; +14 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-1694
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-1694
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22011695
Third Party Advisory
http://www.securityfocus.com/bid/102215
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/134165
More from Integration Bus
9.1
CVE-2016-9706
IBM Integration Bus 9.0 and 10.0 and WebSphere Message Broker SOAP FLOWS is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when…
6.7
CVE-2025-36014
IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.5 is vulnerable to code injection by a privileged user with access to the IIB install directory
6.5
CVE-2024-27265
IBM Integration Bus for z/OS 10.1 through 10.1.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions…
6.5
CVE-2024-22332
The IBM Integration Bus for z/OS 10.1 through 10.1.0.2 AdminAPI is vulnerable to a denial of service due to file system exhaustion
6.1
CVE-2016-9010
IBM WebSphere Message Broker 9.0 and 10.0 could allow a remote attacker to hijack the clicking action of the victim