CVE-2017-1126
Estado: ModificadaMedia (5.3)—
IBM WebSphere Message Broker (IBM Integration Bus 9.0 and 10.0) could allow an unauthorized user to obtain sensitive information about software versions that could lead to further attacks. IBM X-Force ID: 121341.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Puntuación base: 5.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.22%
- Percentil entre todas las CVEs puntuadas: 68
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
CWE
- CWE-200
Referencias
- http://www.ibm.com/support/docview.wss?uid=swg22008470
- http://www.securityfocus.com/bid/101104
- https://exchange.xforce.ibmcloud.com/vulnerabilities/121341
- http://www.ibm.com/support/docview.wss?uid=swg22008470
- http://www.securityfocus.com/bid/101104
- https://exchange.xforce.ibmcloud.com/vulnerabilities/121341
JSON original (NVD)
Mostrar
{
"id": "CVE-2017-1126",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 5.3,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "LOW"
},
"impactScore": 1.4,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "psirt@us.ibm.com",
"affectedData": [
{
"vendor": "IBM",
"product": "Integration Bus",
"versions": [
{
"status": "affected",
"version": "9.0"
},
{
"status": "affected",
"version": "10.0"
}
]
}
]
}
],
"published": "2017-10-04T01:29:02.057",
"references": [
{
"url": "http://www.ibm.com/support/docview.wss?uid=swg22008470",
"tags": [
"Issue Tracking",
"Patch",
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "http://www.securityfocus.com/bid/101104",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "psirt@us.ibm.com"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/121341",
"tags": [
"VDB Entry",
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "http://www.ibm.com/support/docview.wss?uid=swg22008470",
"tags": [
"Issue Tracking",
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/101104",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/121341",
"tags": [
"VDB Entry",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "IBM WebSphere Message Broker (IBM Integration Bus 9.0 and 10.0) could allow an unauthorized user to obtain sensitive information about software versions that could lead to further attacks. IBM X-Force ID: 121341."
},
{
"lang": "es",
"value": "IBM WebSphere Message Broker (IBM Integration Bus 9.0 y 10.0) permite que un usuario no autorizado obtenga información sensible sobre versiones de software que podría permitir que se produzcan futuros ataques. IBM X-Force ID: 121341."
}
],
"lastModified": "2026-06-17T01:13:56.373",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:integration_bus:9.0.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D627B445-2980-4AC2-B674-CA4C472AB214"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:9.0.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "725E3F95-4096-497D-8F2A-02C185ACF8CB"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:9.0.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ACB80DEF-E09A-4B51-96B8-75F0AD9C6499"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:9.0.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "371E03D4-BDD9-40A8-B24B-43C320C9F3E5"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:9.0.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C319D81D-E66B-47E6-A731-D5074314B94B"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:9.0.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B3A6D9A8-9196-4358-B2ED-BD103AB237F8"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:9.0.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "408B31F1-F945-4CEB-B6D4-2666A6B8B2C6"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:9.0.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16DF80F1-4163-46E0-A304-BD01C11EA658"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:10.0.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F96E7A0A-47BD-42EC-A66C-E1F64AD6CA55"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:10.0.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6309A833-9490-494A-BE3A-BA79133BD6E7"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:10.0.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "50810A19-BEDC-4DF6-BA82-DAA1F96D5400"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:10.0.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "97486673-4740-4F4F-8956-73C06B477096"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:10.0.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "79E917E9-DE5E-482A-9A20-823DF475BE66"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:10.0.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC25F42C-82EC-44EE-94AC-E85F428460D2"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:10.0.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FA2BBC72-E5AD-4FAD-8F72-264794847D96"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:10.0.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B3797766-D2E5-4645-A793-ABA12A10CF10"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:10.0.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1486EFCC-5D66-4172-9D57-55AB25C77B7D"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:10.0.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3770768C-96D0-4D8E-8AB5-0347DBE01AF4"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9244FCC7-99F7-4F90-99CD-12FFF5AD2514"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B859DAA9-1B0E-47CE-813D-108776C3B239"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2458C42A-90F7-457C-AAD6-205D9893A993"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8BFEC988-5E94-474F-9A60-966B8FA8B8F6"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BE5CCF85-8149-43DB-A594-99895D94F447"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA0D7E80-2607-4567-8D1C-2ADA32F174D8"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "32E57C58-4A30-43BE-B8CC-E6B38E67AA8C"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D2C048F0-D615-49E6-9B50-22E259C02C5B"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C000DEFF-88E8-405A-B338-A956A07F66F2"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@us.ibm.com"
}