CVE-2016-2953

2016-11-3011:00:00

ibm

www.cve.org

AI Score

3.9

Confidence

High

EPSS

0.001

Percentile

46.6%

JSON

IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 does not require SSL, which allows remote attackers to obtain sensitive cleartext information by sniffing the network.

References

www-01.ibm.com/support/docview.wss?uid=swg1LO90268

www-01.ibm.com/support/docview.wss?uid=swg1LO90295

www-01.ibm.com/support/docview.wss?uid=swg21990888

www.securityfocus.com/bid/94415