CVEvulnerability
CVE-2016-0342
5.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-02-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.4 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 5.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:N
- Weaknesses
- CWE-284
Description
IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote authenticated users to read or modify arbitrary reports by leveraging an incorrect grant of access. IBM X-Force ID: 111783.
Affected configurations
• ibm tririga application platform (>= 3.3.0.0 < 3.3.2.6)
• ibm tririga application platform (>= 3.4.0.0 < 3.4.2.3)
• ibm tririga application platform 3.5.0.0
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21980252 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/111783 VDB Entry, Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21980252 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/111783 VDB Entry, Vendor Advisory