Security Bulletin: IBM Maximo Asset Management could allow an attacker to cause a runtime error using a specially crafted HTTP request, that could disclose sensitive information (CVE-2016-5987)

Summary IBM Maximo Asset Management could allow an attacker to cause a runtime error using a specially crafted HTTP request, that could disclose sensitive information. Vulnerability Details CVEID: CVE-2016-5987 DESCRIPTION: IBM Maximo Asset Management could allow an attacker to cause a runtime...

CVE-2016-5987

IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.10 IF4, and 7.6 before 7.6.0.5 IF3 allows remote attackers to obtain sensitive information via a crafted HTTP request that triggers construction of a runtime error message...

CVE-2016-5987

CVE-2016-5987 affects IBM Maximo Asset Management core versions 7.6, 7.5, and 7.1 (and related IBM products built on those cores). A remote attacker could obtain sensitive information by sending a crafted HTTP request that triggers the construction of a runtime error message, leading to an inform...