CVE-2016-0342

EUVD-2016-0377
IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote authenticated users to read or modify arbitrary reports by leveraging an incorrect grant of access. IBM X-Force ID: 111783.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.4 MEDIUM
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 25%
Affected Products (NVD)
VendorProductVersion
ibmtririga_application_platform
3.3.0.0 ≤
𝑥
< 3.3.2.6
ibmtririga_application_platform
3.4.0.0 ≤
𝑥
< 3.4.2.3
ibmtririga_application_platform
3.5.0.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www-01.ibm.com/support/docview.wss?uid=swg21980252
https://exchange.xforce.ibmcloud.com/vulnerabilities/111783
http://www-01.ibm.com/support/docview.wss?uid=swg21980252
https://exchange.xforce.ibmcloud.com/vulnerabilities/111783