CVE-2016-2917

https://notcve.org/view.php?id=CVE-2016-2917

The notifications component in IBM TRIRIGA Applications 10.4 and 10.5 before 10.5.1 allows remote authenticated users to obtain sensitive password information, and consequently gain privileges, via unspecified vectors. El componente notifications en IBM TRIRIGA Applications 10.4 y 10.5 en versiones anteriores a 10.5.1 permite a usuarios remotos autenticados obtener información sensible de contraseñas y consecuentemente obtener privilegios a través de vectores no especificados. • http://www-01.ibm.com/support/docview.wss?uid=swg1IV84740 http://www-01.ibm.com/support/docview.wss?uid=swg21984304 • CWE-264: Permissions, Privileges, and Access Controls •