Lucene search

PRIOn knowledge basePRION:CVE-2016-0306

HistoryMay 17, 2016 - 2:08 p.m.

Information disclosure

2016-05-1714:08:00

PRIOn knowledge base

www.prio-n.com

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

6 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

38.5%

JSON

IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.41, 8.0 before 8.0.0.13, and 8.5 before 8.5.5.10, when FIPS 140-2 is enabled, misconfigures TLS, which allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors.

CPENameOperatorVersion
websphere_application_servereq8.5.5.6
websphere_application_servereq8.5.0.2
websphere_application_servereq7.0.0.2
websphere_application_servereq7.0.0.37
websphere_application_servereq7.0.0.31
websphere_application_servereq7.0.0.25
websphere_application_servereq7.0.0.33
websphere_application_servereq7.0.0.5
websphere_application_servereq8.0.0.5
websphere_application_servereq7.0.0.15

Name	Operator	Version
websphere_application_server	eq	8.5.5.6
websphere_application_server	eq	8.5.0.2
websphere_application_server	eq	7.0.0.2
websphere_application_server	eq	7.0.0.37
websphere_application_server	eq	7.0.0.31
websphere_application_server	eq	7.0.0.25
websphere_application_server	eq	7.0.0.33
websphere_application_server	eq	7.0.0.5
websphere_application_server	eq	8.0.0.5
websphere_application_server	eq	7.0.0.15

Rows per page:

1-10 of 491

References

www-01.ibm.com/support/docview.wss?uid=swg1PI56190

www-01.ibm.com/support/docview.wss?uid=swg21979231

www.securityfocus.com/bid/85978

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

6 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

38.5%

JSON

Related for PRION:CVE-2016-0306