PT-2016-6748 · Ibm · Ibm Websphere Application Server+1

Published 2016-10-01 · Updated 2017-07-30 · CVE-2016-5986

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.x before 7.0.0.43 IBM WebSphere Application Server versions 8.0.x before 8.0.0.13 IBM WebSphere Application Server versions 8.5.x before 8.5.5.11 IBM WebSphere Application Server versions 9.0.x before 9.0.0.2 IBM WebSphere Application Server Liberty before 16.0.0.3

Description The issue allows remote attackers to obtain sensitive information via unspecified vectors due to mishandled responses.

Recommendations For versions 7.x, update to 7.0.0.43 or later. For versions 8.0.x, update to 8.0.0.13 or later. For versions 8.5.x, update to 8.5.5.11 or later. For versions 9.0.x, update to 9.0.0.2 or later. For Liberty, update to 16.0.0.3 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-5986

Affected Products

Ibm Websphere Application Server

Ibm Websphere Application Server Liberty

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2016-5986 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg1PI67093 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-5986 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21990056 · Vendor Advisory
• http://securitytracker.com/id/1036838 · Note
• http://securityfocus.com/bid/93013 · Note