CVEvulnerability
CVE-2016-2917
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-11-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The notifications component in IBM TRIRIGA Applications 10.4 and 10.5 before 10.5.1 allows remote authenticated users to obtain sensitive password information, and consequently gain privileges, via unspecified vectors.
Affected configurations
• ibm tririga application platform 10.4
• ibm tririga application platform 10.5
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV84740 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21984304 Mitigation, Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV84740 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21984304 Mitigation, Vendor Advisory