CVE-2017-1693
Estado: ModificadaMedia (5.6)—
IBM Integration Bus 9.0 and 10.0 could allow an attacker that has captured a valid session id to hijack another users session during a small timeframe before the session times out. IBM X-Force ID: 134164.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
- Puntuación base: 5.6
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.94%
- Percentil entre todas las CVEs puntuadas: 60
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-613
Referencias
- http://www.ibm.com/support/docview.wss?uid=swg22012642
- http://www.securityfocus.com/bid/102760
- https://exchange.xforce.ibmcloud.com/vulnerabilities/134164
- http://www.ibm.com/support/docview.wss?uid=swg22012642
- http://www.securityfocus.com/bid/102760
- https://exchange.xforce.ibmcloud.com/vulnerabilities/134164
JSON original (NVD)
Mostrar
{
"id": "CVE-2017-1693",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.8,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 5.6,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"integrityImpact": "LOW",
"userInteraction": "NONE",
"attackComplexity": "HIGH",
"availabilityImpact": "LOW",
"privilegesRequired": "NONE",
"confidentialityImpact": "LOW"
},
"impactScore": 3.4,
"exploitabilityScore": 2.2
}
]
},
"affected": [
{
"source": "psirt@us.ibm.com",
"affectedData": [
{
"vendor": "IBM",
"product": "Integration Bus",
"versions": [
{
"status": "affected",
"version": "9.0"
},
{
"status": "affected",
"version": "10.0"
}
]
}
]
}
],
"published": "2018-01-19T14:29:00.213",
"references": [
{
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012642",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "http://www.securityfocus.com/bid/102760",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "psirt@us.ibm.com"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/134164",
"tags": [
"VDB Entry"
],
"source": "psirt@us.ibm.com"
},
{
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012642",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/102760",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/134164",
"tags": [
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-613"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "IBM Integration Bus 9.0 and 10.0 could allow an attacker that has captured a valid session id to hijack another users session during a small timeframe before the session times out. IBM X-Force ID: 134164."
},
{
"lang": "es",
"value": "IBM Integration Bus 9.0 y 10.0 podría permitir que un atacante que haya capturado un id de sesión válido secuestre la sesión de otro usuario durante una pequeña franja de tiempo antes de que la sesión expire. IBM X-Force ID: 134164."
}
],
"lastModified": "2026-06-17T01:14:41.887",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:integration_bus:9.0.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D627B445-2980-4AC2-B674-CA4C472AB214"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:9.0.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "725E3F95-4096-497D-8F2A-02C185ACF8CB"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:9.0.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ACB80DEF-E09A-4B51-96B8-75F0AD9C6499"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:9.0.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "576FE339-BD08-4994-B31A-15BC521650E7"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:9.0.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "371E03D4-BDD9-40A8-B24B-43C320C9F3E5"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:9.0.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C319D81D-E66B-47E6-A731-D5074314B94B"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:9.0.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B3A6D9A8-9196-4358-B2ED-BD103AB237F8"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:9.0.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "408B31F1-F945-4CEB-B6D4-2666A6B8B2C6"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:9.0.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16DF80F1-4163-46E0-A304-BD01C11EA658"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:10.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "92E6A5C9-29C2-458D-AA67-E74945E2012F"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:10.0.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F96E7A0A-47BD-42EC-A66C-E1F64AD6CA55"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:10.0.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6309A833-9490-494A-BE3A-BA79133BD6E7"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:10.0.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "50810A19-BEDC-4DF6-BA82-DAA1F96D5400"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:10.0.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "97486673-4740-4F4F-8956-73C06B477096"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:10.0.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "79E917E9-DE5E-482A-9A20-823DF475BE66"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:10.0.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC25F42C-82EC-44EE-94AC-E85F428460D2"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:10.0.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FA2BBC72-E5AD-4FAD-8F72-264794847D96"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:10.0.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B3797766-D2E5-4645-A793-ABA12A10CF10"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:10.0.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1486EFCC-5D66-4172-9D57-55AB25C77B7D"
},
{
"criteria": "cpe:2.3:a:ibm:integration_bus:10.0.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3770768C-96D0-4D8E-8AB5-0347DBE01AF4"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@us.ibm.com"
}