IBM Security Bulletin: IBM Emptoris Services Procurement is affected by Information leakage vulnerability (CVE-2017-1547)

The IBM Emptoris Services Procurement product is vulnerable to getting valid usernames through Forgot password process

CVE(s): CVE-2017-1547

Affected product(s) and affected version(s):

IBM Emptoris Services Procurement 10.0.0.x

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2h9vUc8
X-Force Database: http://ift.tt/2x4yc6k

The post IBM Security Bulletin: IBM Emptoris Services Procurement is affected by Information leakage vulnerability (CVE-2017-1547) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2habY8L