NVD

Id
10043  
Name
CVE-2011-3391  
Description
IBM Rational Build Forge 7.1.2 relies on client-side JavaScript code to enforce the EditSecurity permission requirement for the Export Key File function, which allows remote authenticated users to read a key file by removing a disable attribute in the Security sub-menu.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2011-09-08  
Modified Date
2011-09-09  
Seq
2011-3391  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
57648 10043 CVE-2011-3391 1026004  View
57649 10043 CVE-2011-3391 PM38058  View
57650 10043 CVE-2011-3391 49407  View
57651 10043 CVE-2011-3391 ibm-rational-editsecurity-info-disclosure(69522)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34647 JVNDB-2011-004889 IBM Rational Build Forge における鍵ファイルを読まれる脆弱性 IBM Rational Build Forge は、Export Key File 関数に対する EditSecurity パーミッション要求強制をクライアントサイドのJavaScript コードに依存するため、鍵ファイルを読まれる脆弱性が存在します。 CVE-2011-3391 51298 CVE-2011-3391 10043 4 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004889.html 2011-04-29 2012-03-27 View