CVE-2017-1107

IBM Marketing Platform 9.1.0, 9.1.2, 10.0, and 10.1 exposes sensitive information in the headers that could be used by an authenticated…

Medium4.3EPSS 1.3%

Published: 19 Jun 2019
Updated: 17 Sept 2024
Reserved: 30 Nov 2016
Assigned by: ibm

Description

IBM Marketing Platform 9.1.0, 9.1.2, 10.0, and 10.1 exposes sensitive information in the headers that could be used by an authenticated attacker in further attacks against the system. IBM X-Force ID: 120906.

Timeline

2016
30 Nov 2016
30 Nov 2016
ID reserved
By ibm
2019
19 Jun 20193 years later
19 Jun 2019· 3 years later
Published
2024
17 Sept 20245 years later
17 Sept 2024· 5 years later
Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2017-1107, by who scored it
Scored by	CVSS	Score	Vector
ibmCNA (assigner)	3.0	Medium4.3	CVSS:3.0/S:U/C:L/I:N/PR:L/AV:N/UI:N/A:N/AC:L/RL:O/RC:C/E:U
NVDNVD · Modified	3.1	Medium4.3	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS (exploitation in 30 days): 1.3% · top 29% of all CVEs (8 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.3.

Weakness

Obtain Information
CWE-200 (opens in a new tab)All about CWE-200 and its CVEs

Affected products

IBM · Marketing Platform
- affected 9.1.2
- affected 10.0
- affected 9.1.0
- affected 10.1

References (3)

https://www.ibm.com/support/docview.wss?uid=ibm10887815 (opens in a new tab)x_refsource_CONFIRMx_transferred
ibm-marketing-cve20171107-info-disc (120906) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
108918 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2017-1107](https://cveledger.app/badge/CVE-2017-1107.svg)](https://cveledger.app/cve/CVE-2017-1107)

Record last updated 17 Sept 2024, 03:03 UTC.