IBM Security Bulletin: Daeja ViewONE Professional, Standard & Virtual is affected by a disclosing sensitive data when logging is enabled vulnerability

Daeja ViewONE Professional, Standard & Virtual has addressed the following vulnerability. When logging is enabled in Daeja ViewONE, the user’s current session ID can be written to log files or standard output.

CVE(s): CVE-2017-1211

Affected product(s) and affected version(s):

 

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2zTVKJC
X-Force Database: http://ift.tt/2xslY45

The post IBM Security Bulletin: Daeja ViewONE Professional, Standard & Virtual is affected by a disclosing sensitive data when logging is enabled vulnerability appeared first on IBM PSIRT Blog.

Product Name	Affected Versions
Daeja ViewONE Virtual	5.0.0
Daeja ViewONE Professional, Standard & Virtual	4.1.5

from IBM Product Security Incident Response Team http://ift.tt/2zTVMkI