CVE-2017-1355

IBM Atlas eDiscovery Process Management 6.0.3 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 126682.

• CWE-200

• http://www.securityfocus.com/bid/102016Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/126682Issue Tracking, VDB Entry, Vendor Advisory
• https://www.ibm.com/support/docview.wss?uid=swg22005836Issue Tracking, Vendor Advisory
• http://www.securityfocus.com/bid/102016Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/126682Issue Tracking, VDB Entry, Vendor Advisory
• https://www.ibm.com/support/docview.wss?uid=swg22005836Issue Tracking, Vendor Advisory

Published

Dec 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1348IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerab…
• CVE-2017-1349IBM Sterling B2B Integrator Standard Edition 5.2 stores pote…
• CVE-2017-1350IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 …8.4
• CVE-2017-1352IBM Maximo Asset Management 7.5 and 7.6 could allow an authe…
• CVE-2017-1353IBM Atlas eDiscovery Process Management 6.0.3 could allow an…
• CVE-2017-1354IBM Atlas eDiscovery Process Management 6.0.3 is vulnerable …
• CVE-2017-1356IBM Atlas eDiscovery Process Management 6.0.3 is vulnerable …
• CVE-2017-1357IBM Maximo Asset Management 7.5 and 7.6 could allow an authe…
• CVE-2017-1359IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scrip…
• CVE-2017-1362IBM Security Identity Manager Adapters 6.0 and 7.0 stores us…
• CVE-2017-1363IBM Team Concert (RTC) is vulnerable to cross-site scripting…
• CVE-2017-1364IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scrip…