PT-2016-4114 · Ibm · Ibm Control Center+1

Published 2016-07-08 · Updated 2016-07-08 · CVE-2016-0252

Positive Technologies (AI Summary)

CVSS v3.1

5.1

Medium

Base vector

AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Control Center versions 6.x before 6.0.0.1 iFix06 Sterling Control Center versions 5.4.x before 5.4.2.1 iFix09

Description The issue allows local users to decrypt the master key.

Recommendations For IBM Control Center versions 6.x before 6.0.0.1 iFix06, update to 6.0.0.1 iFix06 or later. For Sterling Control Center versions 5.4.x before 5.4.2.1 iFix09, update to 5.4.2.1 iFix09 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-0252

Affected Products

Ibm Control Center

Ibm Sterling Control Center

References · 3

• http://www-01.ibm.com/support/docview.wss?uid=swg21985641 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-0252 · Security Note
• https://osv.dev/vulnerability/CVE-2016-0252 · Vendor Advisory