Lucene search

[email protected]NVD:CVE-2016-3021

HistoryFeb 01, 2017 - 8:59 p.m.

CVE-2016-3021

2017-02-0120:59:00

CWE-200

[email protected]

web.nvd.nist.gov

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

2.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

3.2 Low

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

19.1%

JSON

IBM Security Access Manager for Web could allow an authenticated attacker to obtain sensitive information from error message using a specially crafted HTTP request.

Affected configurations

NVD

Node

ibmsecurity_access_manager_9.0_firmwareMatch9.0.0

ibmsecurity_access_manager_9.0_firmwareMatch9.0.0.1

ibmsecurity_access_manager_9.0_firmwareMatch9.0.1.0

ibmsecurity_access_manager_for_mobile_8.0_firmwareMatch8.0.0.1

ibmsecurity_access_manager_for_mobile_8.0_firmwareMatch8.0.0.2

ibmsecurity_access_manager_for_mobile_8.0_firmwareMatch8.0.0.3

ibmsecurity_access_manager_for_mobile_8.0_firmwareMatch8.0.0.5

ibmsecurity_access_manager_for_mobile_8.0_firmwareMatch8.0.1.0

ibmsecurity_access_manager_for_mobile_8.0_firmwareMatch8.0.1.2

ibmsecurity_access_manager_for_mobile_8.0_firmwareMatch8.0.1.3

ibmsecurity_access_manager_for_mobile_8.0_firmwareMatch8.0.1.4

ibmsecurity_access_manager_for_web_7.0_firmwareMatch7.0.0.1

ibmsecurity_access_manager_for_web_7.0_firmwareMatch7.0.0.2

ibmsecurity_access_manager_for_web_7.0_firmwareMatch7.0.0.3

ibmsecurity_access_manager_for_web_7.0_firmwareMatch7.0.0.4

ibmsecurity_access_manager_for_web_7.0_firmwareMatch7.0.0.5

ibmsecurity_access_manager_for_web_7.0_firmwareMatch7.0.0.6

ibmsecurity_access_manager_for_web_7.0_firmwareMatch7.0.0.7

ibmsecurity_access_manager_for_web_7.0_firmwareMatch7.0.0.8

ibmsecurity_access_manager_for_web_7.0_firmwareMatch7.0.0.9

ibmsecurity_access_manager_for_web_7.0_firmwareMatch7.0.0.10

ibmsecurity_access_manager_for_web_7.0_firmwareMatch7.0.0.11

ibmsecurity_access_manager_for_web_7.0_firmwareMatch7.0.0.12

ibmsecurity_access_manager_for_web_7.0_firmwareMatch7.0.0.13

ibmsecurity_access_manager_for_web_7.0_firmwareMatch7.0.0.14

ibmsecurity_access_manager_for_web_7.0_firmwareMatch7.0.0.15

ibmsecurity_access_manager_for_web_7.0_firmwareMatch7.0.0.16

ibmsecurity_access_manager_for_web_8.0_firmwareMatch8.0.0.1

ibmsecurity_access_manager_for_web_8.0_firmwareMatch8.0.0.2

ibmsecurity_access_manager_for_web_8.0_firmwareMatch8.0.0.3

ibmsecurity_access_manager_for_web_8.0_firmwareMatch8.0.0.5

ibmsecurity_access_manager_for_web_8.0_firmwareMatch8.0.1.0

ibmsecurity_access_manager_for_web_8.0_firmwareMatch8.0.1.2

ibmsecurity_access_manager_for_web_8.0_firmwareMatch8.0.1.3

ibmsecurity_access_manager_for_web_8.0_firmwareMatch8.0.1.4

AND

ibmsecurity_access_manager_for_mobile_applianceMatch8.0

ibmsecurity_access_manager_for_web_applianceMatch7.0

ibmsecurity_access_manager_for_web_applianceMatch8.0

References

www.ibm.com/support/docview.wss?uid=swg21995436

www.securityfocus.com/bid/96114

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

2.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

3.2 Low

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

19.1%

JSON

Related for NVD:CVE-2016-3021

ibm1 cve1 cvelist1 prion1