CVE-2016-8982

Опубликовано: 01 фев. 2017

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

IBM InfoSphere Information Server stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history.

Ссылки

http://www.ibm.com/support/docview.wss?uid=swg21995895
Patch
Vendor Advisory
http://www.securityfocus.com/bid/95651
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037616
http://www.ibm.com/support/docview.wss?uid=swg21995895
Patch
Vendor Advisory
http://www.securityfocus.com/bid/95651
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037616

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:infosphere_datastage:8.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_datastage:9.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_datastage:11.3:*:*:*:*:*:*:*

EPSS

Процентиль: 45%

0.00222

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-86gw-59mw-3ww4