« Volver al listado

CVE-2002-1731

Estado: ModificadaBaja (2.1)—

The System Request menu in IBM AS/400 allows local users to list valid user accounts by viewing the object names that are type USRPRF.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — OS 400

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2002-1731",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2002-12-31T05:00:00.000",
  "references": [
    {
      "url": "http://securitytracker.com/id?1003507",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/4059",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/8179",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1003507",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/4059",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/8179",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The System Request menu in IBM AS/400 allows local users to list valid user accounts by viewing the object names that are type USRPRF."
    }
  ],
  "lastModified": "2026-06-16T21:59:53.073",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:os_400:v4r2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DF439C25-CE7A-4ADA-A687-01F78729CF07"
            },
            {
              "criteria": "cpe:2.3:o:ibm:os_400:v4r3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7840B131-E836-478A-A6B5-5F19FB1B079D"
            },
            {
              "criteria": "cpe:2.3:o:ibm:os_400:v4r4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5987D179-8327-4ABD-8D23-CCC9D0457FE5"
            },
            {
              "criteria": "cpe:2.3:o:ibm:os_400:v4r5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "22D354F5-4D07-4C4A-BE5F-F23A3BA11979"
            },
            {
              "criteria": "cpe:2.3:o:ibm:os_400:v5r1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7B8413DB-6A89-4CFE-A005-9D2FC9FBD114"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}