Lucene search

[email protected]CVE-2016-5967

HistoryNov 25, 2016 - 3:59 a.m.

CVE-2016-5967

2016-11-2503:59:10

CWE-532

[email protected]

web.nvd.nist.gov

ibm

raa

6.1.0

fp10

installation

component

vulnerability

cve-2016-5967

security

nvd

log

discovery

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

The installation component in IBM Rational Asset Analyzer (RAA) 6.1.0 before FP10 allows local users to discover the WAS Admin password by reading IM native logs.

Affected configurations

NVD

Node

ibmrational_asset_analyzerMatch6.1.0

ibmrational_asset_analyzerMatch6.1.0.1

ibmrational_asset_analyzerMatch6.1.0.2

ibmrational_asset_analyzerMatch6.1.0.3

ibmrational_asset_analyzerMatch6.1.0.4

ibmrational_asset_analyzerMatch6.1.0.5

ibmrational_asset_analyzerMatch6.1.0.6

ibmrational_asset_analyzerMatch6.1.0.7

ibmrational_asset_analyzerMatch6.1.0.8

ibmrational_asset_analyzerMatch6.1.0.9

CPENameOperatorVersion
ibm:rational_asset_analyzeribm rational asset analyzereq6.1.0
ibm:rational_asset_analyzeribm rational asset analyzereq6.1.0.1
ibm:rational_asset_analyzeribm rational asset analyzereq6.1.0.2
ibm:rational_asset_analyzeribm rational asset analyzereq6.1.0.3
ibm:rational_asset_analyzeribm rational asset analyzereq6.1.0.4
ibm:rational_asset_analyzeribm rational asset analyzereq6.1.0.5
ibm:rational_asset_analyzeribm rational asset analyzereq6.1.0.6
ibm:rational_asset_analyzeribm rational asset analyzereq6.1.0.7
ibm:rational_asset_analyzeribm rational asset analyzereq6.1.0.8
ibm:rational_asset_analyzeribm rational asset analyzereq6.1.0.9

CPE	Name	Operator	Version
ibm:rational_asset_analyzer	ibm rational asset analyzer	eq	6.1.0
ibm:rational_asset_analyzer	ibm rational asset analyzer	eq	6.1.0.1
ibm:rational_asset_analyzer	ibm rational asset analyzer	eq	6.1.0.2
ibm:rational_asset_analyzer	ibm rational asset analyzer	eq	6.1.0.3
ibm:rational_asset_analyzer	ibm rational asset analyzer	eq	6.1.0.4
ibm:rational_asset_analyzer	ibm rational asset analyzer	eq	6.1.0.5
ibm:rational_asset_analyzer	ibm rational asset analyzer	eq	6.1.0.6
ibm:rational_asset_analyzer	ibm rational asset analyzer	eq	6.1.0.7
ibm:rational_asset_analyzer	ibm rational asset analyzer	eq	6.1.0.8
ibm:rational_asset_analyzer	ibm rational asset analyzer	eq	6.1.0.9

References

www-01.ibm.com/support/docview.wss?uid=swg1PI61540

www-01.ibm.com/support/docview.wss?uid=swg21990215

www.securityfocus.com/bid/93145

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2016-5967

cvelist1 ibm1 nvd1 prion1