« Volver al listado

CVE-2017-4982

Estado: ModificadaCrítica (9.8)—

Mainframe Enablers ResourcePak Base versiones 7.6.0, 8.0.0 y 8.1.0 de EMC, contiene una corrección para una vulnerabilidad de administración de privilegios que potencialmente podrían ser explotadas por usuarios maliciosos para comprometer el sistema afectado.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

EMC — Mainframe Enablers Resourcepak Base

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2017-4982",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "security_alert@emc.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "EMC Mainframe Enablers ResourcePak Base versions 7.6.0, 8.0.0 and 8.1.0",
          "versions": [
            {
              "status": "affected",
              "version": "EMC Mainframe Enablers ResourcePak Base versions 7.6.0, 8.0.0 and 8.1.0"
            }
          ]
        }
      ]
    }
  ],
  "published": "2017-05-08T21:29:00.163",
  "references": [
    {
      "url": "http://www.securityfocus.com/archive/1/540531/30/0/threaded",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/98049",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "security_alert@emc.com"
    },
    {
      "url": "https://packetstormsecurity.com/files/cve/CVE-2017-4982",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "nvd@nist.gov"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/540531/30/0/threaded",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/98049",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-269"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "EMC Mainframe Enablers ResourcePak Base versions 7.6.0, 8.0.0, and 8.1.0 contains a fix for a privilege management vulnerability that could potentially be exploited by malicious users to compromise the affected system."
    },
    {
      "lang": "es",
      "value": "Mainframe Enablers ResourcePak Base versiones 7.6.0, 8.0.0 y 8.1.0 de EMC, contiene una corrección para una vulnerabilidad de administración de privilegios que potencialmente podrían ser explotadas por usuarios maliciosos para comprometer el sistema afectado."
    }
  ],
  "lastModified": "2026-06-17T01:19:40.867",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:emc:mainframe_enablers_resourcepak_base:7.6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F69A4016-FDAA-453B-BE64-72C4174F1D8E"
            },
            {
              "criteria": "cpe:2.3:a:emc:mainframe_enablers_resourcepak_base:8.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B7733557-9911-461F-95FA-18494DE27303"
            },
            {
              "criteria": "cpe:2.3:a:emc:mainframe_enablers_resourcepak_base:8.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C9F9649D-9D4F-4883-B95B-67CD387EA509"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security_alert@emc.com"
}