IBM SPSS Modeler on Windows 17.0, 18.0, 18.2.2, 18.3, 18.4, and 18.5 requires the end user to have access to the server SSL key which could allow a local user to decrypt and obtain sensitive information. IBM X-Force ID: 256117.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Spss_modeler | Ibm | 17.0 (including) | 17.0 (including) |
| Spss_modeler | Ibm | 18.0 (including) | 18.0 (including) |
| Spss_modeler | Ibm | 18.2.2 (including) | 18.2.2 (including) |
| Spss_modeler | Ibm | 18.3 (including) | 18.3 (including) |
| Spss_modeler | Ibm | 18.4 (including) | 18.4 (including) |
| Spss_modeler | Ibm | 18.5 (including) | 18.5 (including) |
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/256117
- https://https://www.ibm.com/support/pages/node/7004299
- https://exchange.xforce.ibmcloud.com/vulnerabilities/256117
- https://https://www.ibm.com/support/pages/node/7004299