CVE-2016-0202

Опубликовано: 08 фев. 2017

Источник: nvd

CVSS3: 3.3

CVSS2: 2.1

EPSS Низкий

Описание

A vulnerability has been identified in tasks, backend object generated for handling any action performed by the application in IBM Cloud Orchestrator. It is possible for an authenticated user to view any task of the current users domain.

Ссылки

http://www.ibm.com/support/docview.wss?uid=swg2C1000134
Patch
Vendor Advisory
http://www.securityfocus.com/bid/94578
Third Party Advisory
VDB Entry
http://www.ibm.com/support/docview.wss?uid=swg2C1000134
Patch
Vendor Advisory
http://www.securityfocus.com/bid/94578
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:cloud_orchestrator:2.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cloud_orchestrator:2.3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cloud_orchestrator:2.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cloud_orchestrator:2.4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cloud_orchestrator:2.4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cloud_orchestrator:2.4.0.3:*:*:*:*:*:*:*

EPSS

Процентиль: 29%

0.00108

Низкий

3.3 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-rr3j-c9jc-fvc3