CVE-2016-0205

Опубликовано: 30 авг. 2018

Источник: nvd

CVSS3: 3.3

CVSS2: 2.1

EPSS Низкий

Описание

A vulnerability has been identified in IBM Cloud Orchestrator 2.3, 2.3.0.1, 2.4, and 2.4.0.1 that could allow an attacker after authentication to enumerate valid users of the system. IBM X-Force ID: 109394.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/109394
VDB Entry
Vendor Advisory
https://www-01.ibm.com/support/docview.wss?uid=swg2C4000049
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/109394
VDB Entry
Vendor Advisory
https://www-01.ibm.com/support/docview.wss?uid=swg2C4000049
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:cloud_orchestrator:2.3.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cloud_orchestrator:2.3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cloud_orchestrator:2.4.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cloud_orchestrator:2.4.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 16%

0.0005

Низкий

3.3 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-5vhg-w7gf-pwqx