PT-2016-4172 · Ibm · Ibm Websphere Application Server Liberty

Publicado 2016-11-24 · Atualizado 2016-11-28 · CVE-2016-0378

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server (WAS) Liberty versions prior to 16.0.0.3

Description The issue allows remote attackers to obtain sensitive information by triggering an exception when the installation lacks a default error page.

Recommendations For versions prior to 16.0.0.3, update to version 16.0.0.3 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2016-0378

Produtos afetados

Ibm Websphere Application Server Liberty

Referências · 5

• https://osv.dev/vulnerability/CVE-2016-0378 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1PI54459 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-0378 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21981529 · Aviso do Fabricante
• http://securityfocus.com/bid/93143 · Nota