CVE-2016-5935

5.9MEDIUM

Key Information:

Vendor
IBM
Status
Tivoli Components
Vendor
CVE Published:
2 February 2017

Summary

IBM Jazz for Service Management could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the SSL certificate. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.

Affected Version(s)

Tivoli Components 1.1

Tivoli Components 1.1.0.1

Tivoli Components 1.1.0.2

References

http://www.securityfocus.com/bid/96003
vdb-entryx_refsource_BID
http://www.ibm.com/support/docview.wss?uid=swg21997711
x_refsource_CONFIRM

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.