IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive information due to a security misconfiguration where the documentation server binds to an unrestricted IP address.
oryginał ENCVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NIBM Documentation Offline
APPIbm1.0.0 – 1.5.1 (bez)
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje
Powiązane podatności
CVE-2026-17482CRITICAL9.8ten sam produkt
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to i...
CVE-2026-17481HIGH8.8ten sam produkt
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to i...
CVE-2022-47986CRITICAL9.8⚠ KEVPL ✓ten sam vendor
RCE przez YAML deserialization w IBM Aspera Faspex
CVE-2020-4427CRITICAL9.8⚠ KEVPL ✓ten sam vendor
IBM Data Risk Manager — pominięcie uwierzytelnienia SAML (Auth Bypass)
CVE-2020-4428CRITICAL9.1⚠ KEVPL ✓ten sam vendor
Command Injection w IBM Data Risk Manager umożliwiający RCE