Security Bulletin: IBM TRIRIGA Application Platform Information disclosure (CVE-2016-0345)

Summary The IBM TRIRIGA Application Platform no longer discloses server file path information when Birt reports are rendered. Vulnerability Details CVEID: CVE-2016-0345 CVSS Base Score: 4.3 CVSS Temporal Score: See for the current score CVSS Environmental Score: Undefined CVSS Vector:...

CVE-2016-0345

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote authenticated users to obtain the installation path via vectors involving Birt report rendering. IBM X-Force ID: 111786...

CVE-2016-0345

IBM TRIRIGA Application Platform 3.3/3.4/3.5 are affected by CVE-2016-0345, which allows remote authenticated users to disclose the installation path through Birt report rendering. Root cause is information disclosure via Birt report rendering paths. Remediations are to upgrade to fixed fix packs...