Information Disclosure in IBM Cloud Orchestrator
CVE-2016-0202

3.3LOW

Key Information:

Vendor: IBM Corporation
Status: Cloud Orchestrator
Vendor: CVE Published:; 8 February 2017

Summary

A vulnerability in IBM Cloud Orchestrator allows an authenticated user to access and view task details associated with other users within the same domain. This exposure could lead to unauthorized disclosure of sensitive information related to ongoing tasks, potentially compromising user privacy and security within cloud operations. Administrators are advised to implement necessary security measures and monitor user permissions to prevent unauthorized access.

Affected Version(s)

Cloud Orchestrator 2.2

Cloud Orchestrator 2.2.0.1

Cloud Orchestrator 2.3

References

http://www.securityfocus.com/bid/94578

vdb-entryx_refsource_BID

http://www.ibm.com/support/docview.wss?uid=swg2C1000134

x_refsource_CONFIRM

CVSS V3.1

Score:

3.3

Severity:

LOW

Confidentiality:

Low

Integrity:

None

Availability:

Low

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Feb 8, 2017
Vulnerability Reserved
Dec 8, 2015