PT-2016-4092 · Ibm · Ibm Security Network Protection+1

Publicado 2016-01-18 · Atualizado 2016-12-07 · CVE-2016-0201

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Security Network Protection versions 5.3.1 through 5.3.1.6 IBM Security Network Protection version 5.3.2

Description The issue allows remote attackers to discover credentials by triggering an MD5 collision.

Recommendations For IBM Security Network Protection versions 5.3.1 through 5.3.1.6, update to version 5.3.1.7 or later. For IBM Security Network Protection version 5.3.2, update to a version that includes the fix for this issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2016-0201

Produtos afetados

Ibm Aix

Ibm Security Network Protection

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-0201 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-0201 · Aviso do Fabricante
• http://securityfocus.com/bid/80883 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg21974242 · Aviso do Fabricante
• http://securitytracker.com/id/1034696 · Nota