CVE-2017-1119

IBM Marketing Operations 9.1.0, 9.1.2, and 10.1 could allow a remote attacker to obtain sensitive information. An attacker could send a specially-crafted request to cause an error message to be returned containing the full root path. An attacker could use this information to launch further attacks against the affected system. IBM X-Force ID: 121171.

• CWE-200

• http://www.ibm.com/support/docview.wss?uid=ibm10738519Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/121171VDB Entry, Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=ibm10738519Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/121171VDB Entry, Vendor Advisory

Published

Nov 9, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-11183front/backup.php in GLPI before 9.1.5 allows remote authenti…
• CVE-2017-11184SQL injection exists in front/devicesoundcard.php in GLPI be…
• CVE-2017-11185The gmp plugin in strongSwan before 5.6.0 allows remote atta…7.5
• CVE-2017-11187phpMyFAQ before 2.9.8 does not properly mitigate brute-force…
• CVE-2017-11188The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0…
• CVE-2017-11189unrarlib.c in unrar-free 0.0.1 might allow remote attackers …6.5
• CVE-2017-11190unrarlib.c in unrar-free 0.0.1, when _DEBUG_LOG mode is enab…
• CVE-2017-11191FreeIPA 4.x with API version 2.213 allows a remote authentic…
• CVE-2017-11193Pulse Connect Secure 8.3R1 has CSRF in diag.cgi. In the pane…
• CVE-2017-11194Pulse Connect Secure 8.3R1 has Reflected XSS in adminserverc…
• CVE-2017-11195Pulse Connect Secure 8.3R1 has Reflected XSS in launchHelp.c…
• CVE-2017-11196Pulse Connect Secure 8.3R1 has CSRF in logout.cgi. The logou…