Security Bulletin: Information disclosure CVE-2016-5935 affects IBM Dashboard Application Services Hub (DASH) v3.1.3

Summary IBM Dashboard Application Services Hub, a part of IBM Jazz for Service Management JazzSM, could allow a remote attacker to obtain sensitive information. There is a lack of certificate verification when connecting to remote datastores from WebSphere Admin Console in federation scenarios...

CVE-2016-5935

CVE-2016-5935 relates to IBM Jazz for Service Management via IBM Dashboard Application Services Hub (DASH) 3.1.3 (part of JazzSM 1.1.3). The vulnerability arises from a lack of SSL certificate validation when connecting to remote datastores from the WebSphere Admin Console in federation scenarios...