Security Bulletin: IBM InfoSphere Information Server is vulnerable to information disclosure (CVE-2016-5994)

Summary IBM InfoSphere Information Server contains a vulnerability that would allow an authenticated user to browse any file on the engine tier, and examine its contents. Vulnerability Details CVEID: CVE-2016-5994 DESCRIPTION: IBM InfoSphere Information Server contains a vulnerability that would...

CVE-2016-5994

IBM InfoSphere Information Server (11.5) is affected by CVE-2016-5994: an authenticated user can browse arbitrary files on the engine tier and read contents (information disclosure). The IBM Security Bulletin notes the vulnerability, lists affected product/version (InfoSphere Information Server 1...