PT-2016-5299 · Ibm · Ibm Connections

Published 2016-11-30 · Updated 2016-11-30 · CVE-2016-2953

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Connections versions 4.0 through 5.0 before CR4

Description The issue allows remote attackers to obtain sensitive cleartext information by sniffing the network, as the software does not require SSL.

Recommendations For versions 4.0 through 5.0 before CR4, consider enabling SSL to encrypt the network traffic and prevent sensitive information from being intercepted.

Fix

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2016-2953

Affected Products

Ibm Connections

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2016-2953 · Security Note
• https://osv.dev/vulnerability/CVE-2016-2953 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1LO90268 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1LO90295 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21990888 · Vendor Advisory
• http://securityfocus.com/bid/94415 · Note