CVEvulnerability
CVE-2016-2953
3.7 LOW
Official page ↗
- Status
- Modified
- Published
- 2016-11-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 3.7 LOW — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 does not require SSL, which allows remote attackers to obtain sensitive cleartext information by sniffing the network.
Affected configurations
• ibm connections 4.0.0.0
• ibm connections 4.5.0.0
• ibm connections 5.0.0.0
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1LO90268 Broken Link
- http://www-01.ibm.com/support/docview.wss?uid=swg1LO90295 Broken Link
- http://www-01.ibm.com/support/docview.wss?uid=swg21990888 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/94415 Third Party Advisory, VDB Entry
- http://www-01.ibm.com/support/docview.wss?uid=swg1LO90268 Broken Link
- http://www-01.ibm.com/support/docview.wss?uid=swg1LO90295 Broken Link
- http://www-01.ibm.com/support/docview.wss?uid=swg21990888 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/94415 Third Party Advisory, VDB Entry