Security Bulletin: Improper Input Validation in IBM TRIRIGA Application Platform (CVE-2016-0300)

Summary The IBM TRIRIGA Application Platform has a security flaw that could grant unauthenticated access into all JSP pages within the application structure under certain circumstances with the right criteria, which may allow for subsequent probing and exploitation. Vulnerability Details CVEID:...

CVE-2016-0300

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 might allow remote attackers to access arbitrary JSP pages via vectors related to improper input validation. IBM X-Force ID: 111412...

CVE-2016-0300

IBM TRIRIGA Application Platform is affected by CVE-2016-0300 due to improper input validation, enabling remote access to arbitrary JSP pages. Affected versions include 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1. Remediation: upgrade to fixed packs 3.3.2.6, 3.4.2.3, or 3.5.0.1...