PT-2016-4092 · Ibm · Ibm Security Network Protection+1

Published 2016-01-18 · Updated 2016-12-07 · CVE-2016-0201

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Security Network Protection versions 5.3.1 through 5.3.1.6 IBM Security Network Protection version 5.3.2

Description The issue allows remote attackers to discover credentials by triggering an MD5 collision.

Recommendations For IBM Security Network Protection versions 5.3.1 through 5.3.1.6, update to version 5.3.1.7 or later. For IBM Security Network Protection version 5.3.2, update to a version that includes the fix for this issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-0201

Affected Products

Ibm Aix

Ibm Security Network Protection

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-0201 · Security Note
• https://osv.dev/vulnerability/CVE-2016-0201 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21974242 · Vendor Advisory
• http://securityfocus.com/bid/80883 · Note
• http://securitytracker.com/id/1034696 · Note