Lucene search

K
cve[email protected]CVE-2016-9735
HistoryMay 15, 2017 - 9:29 p.m.

CVE-2016-9735

2017-05-1521:29:00
CWE-200
web.nvd.nist.gov
12
ibm
jazz foundation
cve-2016-9735
authenticated user
sensitive information disclosure
x-force
nvd

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.1 Medium

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

19.0%

IBM Jazz Foundation could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID: 119781,

Affected configurations

Vulners
NVD
Node
ibm_corporationrational_collaborative_lifecycle_managementMatch4.0
OR
ibm_corporationrational_collaborative_lifecycle_managementMatch4.0.1
OR
ibm_corporationrational_collaborative_lifecycle_managementMatch4.0.2
OR
ibm_corporationrational_collaborative_lifecycle_managementMatch4.0.3
OR
ibm_corporationrational_collaborative_lifecycle_managementMatch4.0.4
OR
ibm_corporationrational_collaborative_lifecycle_managementMatch4.0.5
OR
ibm_corporationrational_collaborative_lifecycle_managementMatch4.0.6
OR
ibm_corporationrational_collaborative_lifecycle_managementMatch5.0
OR
ibm_corporationrational_collaborative_lifecycle_managementMatch4.0.7
OR
ibm_corporationrational_collaborative_lifecycle_managementMatch5.0.1
OR
ibm_corporationrational_collaborative_lifecycle_managementMatch5.0.2
OR
ibm_corporationrational_collaborative_lifecycle_managementMatch6.0
OR
ibm_corporationrational_collaborative_lifecycle_managementMatch6.0.1
OR
ibm_corporationrational_collaborative_lifecycle_managementMatch6.0.2
OR
ibm_corporationrational_collaborative_lifecycle_managementMatch6.0.3

CNA Affected

[
  {
    "product": "Rational Collaborative Lifecycle Management",
    "vendor": "IBM Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "4.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5, 4.0.6, 5.0, 4.0.7, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, 6.0.3"
      }
    ]
  }
]

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.1 Medium

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

19.0%

Related for CVE-2016-9735