PT-2016-5299 · Ibm · Ibm Connections

Publicado 2016-11-30 · Atualizado 2016-11-30 · CVE-2016-2953

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Connections versions 4.0 through 5.0 before CR4

Description The issue allows remote attackers to obtain sensitive cleartext information by sniffing the network, as the software does not require SSL.

Recommendations For versions 4.0 through 5.0 before CR4, consider enabling SSL to encrypt the network traffic and prevent sensitive information from being intercepted.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2016-2953

Produtos afetados

Ibm Connections

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2016-2953 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-2953 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1LO90268 · Aviso do Fabricante
• http://securityfocus.com/bid/94415 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg1LO90295 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg21990888 · Aviso do Fabricante