IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 159227.
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
Link | Tags |
---|---|
https://www.ibm.com/support/docview.wss?uid=ibm10886061 | patch vendor advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/159227 | vdb entry vendor advisory |