CVE-2016-0389

EUVD-2016-0424
Admin Center in IBM WebSphere Application Server (WAS) 8.5.5.2 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote attackers to obtain sensitive information via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 45%
Affected Products (NVD)
VendorProductVersion
ibmwebsphere_application_server
8.5.5.2
ibmwebsphere_application_server
8.5.5.3
ibmwebsphere_application_server
8.5.5.4
ibmwebsphere_application_server
8.5.5.5
ibmwebsphere_application_server
8.5.5.6
ibmwebsphere_application_server
8.5.5.7
ibmwebsphere_application_server
8.5.5.8
ibmwebsphere_application_server
8.5.5.9
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www-01.ibm.com/support/docview.wss?uid=swg1PI62052
http://www-01.ibm.com/support/docview.wss?uid=swg21982012
http://www.securityfocus.com/bid/91515
http://www-01.ibm.com/support/docview.wss?uid=swg1PI62052
http://www-01.ibm.com/support/docview.wss?uid=swg21982012
http://www.securityfocus.com/bid/91515