IBM Security Bulletin: 3RD PARTY IBM MDM Software (11.0) report download without authentication affects IBM InfoSphere Master Data Management Collaboration Server

IBM InfoSphere Master Data Management – Collaborative Edition could allow an unauthorized user to download reports without authentication

CVE(s): CVE-2017-1523

Affected product(s) and affected version(s):

These vulnerabilities are known to affect the following offerings:
IBM InfoSphere Master Data Management Collaboration Server version 11.5

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2zUulXN
X-Force Database: http://ift.tt/2xrOHpL

The post IBM Security Bulletin: 3RD PARTY IBM MDM Software (11.0) report download without authentication affects IBM InfoSphere Master Data Management Collaboration Server appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2zUoL87