PT-2016-4117 · Ibm · Aix+2

Publicado 2016-07-26 · Atualizado 2021-08-31 · CVE-2016-0266

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM AIX versions 5.3, 6.1, 7.1, and 7.2 VIOS version 2.2.x

Description The issue allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors because the software does not default to the latest TLS version. This makes it easier for remote attackers to use man-in-the-middle techniques.

Recommendations For IBM AIX versions 5.3, 6.1, 7.1, and 7.2, update the configuration to require the newest version of TLS by default. For VIOS version 2.2.x, update the configuration to require the newest version of TLS by default.

Correção

Enumeração de Fraquezas

CWE-254

Identificadores relacionados

CVE-2016-0266

Produtos afetados

Aix

Ibm Aix

Vios

Referências · 12

• http://www-01.ibm.com/support/docview.wss?uid=swg1IV86120 · Aviso do Fabricante
• http://securityfocus.com/bid/92150 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV86132 · Aviso do Fabricante
• https://t.me/cvenotify/20441 · Publicação no Telegram
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV86117 · Aviso do Fabricante
• http://securitytracker.com/id/1036467 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV86116 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV86119 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-0266 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-0266 · Aviso do Fabricante
• https://aix.software.ibm.com/aix/efixes/security/nettcp_advisory2.asc · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV86118 · Aviso do Fabricante