IBM Security Bulletin: No verification of user rights for certain applications on MaaS360 Windows installations. (CVE-2017-1422).

EMSAgentCmd.exe executes commands without verifying the source of the request. Additionally, commands are not restricted to operating within the boundaries of the application’s self.

CVE(s): CVE-2017-1422

Affected product(s) and affected version(s):

Product/Version

MaaS360 DTM all versions up to 3.81

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2wbKYiX
X-Force Database: http://ift.tt/2vSmysh

The post IBM Security Bulletin: No verification of user rights for certain applications on MaaS360 Windows installations. (CVE-2017-1422). appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2wbUna1