CVE-2016-2865
Severity Score
6.5
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The GIT Integration component in IBM Rational Team Concert (RTC) 5.x before 5.0.2 iFix14 and 6.x before 6.0.1 iFix5 and Rational Collaborative Lifecycle Management 5.x before 5.0.2 iFix14 and 6.x before 6.0.1 iFix5 allows remote authenticated users to obtain sensitive information via a malformed request.
El componente GIT Integration en IBM Rational Team Concert (RTC) 5.x en versiones anteriores a 5.0.2 iFix14 y 6.x en versiones anteriores a 6.0.1 iFix5 y Rational Collaborative Lifecycle Management 5.x en versiones anteriores a 5.0.2 iFix14 y 6.x en versiones anteriores a 6.0.1 iFix5 permite a usuarios remotos autenticados obtener información sensible a través de una petición mal formada.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2016-03-09 CVE Reserved
- 2016-07-15 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/91680 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www-01.ibm.com/support/docview.wss?uid=swg21985865 | 2016-11-28 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Ibm Search vendor "Ibm" | Rational Team Concert Search vendor "Ibm" for product "Rational Team Concert" | 5.0.0 Search vendor "Ibm" for product "Rational Team Concert" and version "5.0.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Team Concert Search vendor "Ibm" for product "Rational Team Concert" | 5.0.1 Search vendor "Ibm" for product "Rational Team Concert" and version "5.0.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Team Concert Search vendor "Ibm" for product "Rational Team Concert" | 5.0.2 Search vendor "Ibm" for product "Rational Team Concert" and version "5.0.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Collaborative Lifecycle Management Search vendor "Ibm" for product "Rational Collaborative Lifecycle Management" | 5.0.0 Search vendor "Ibm" for product "Rational Collaborative Lifecycle Management" and version "5.0.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Collaborative Lifecycle Management Search vendor "Ibm" for product "Rational Collaborative Lifecycle Management" | 5.0.1 Search vendor "Ibm" for product "Rational Collaborative Lifecycle Management" and version "5.0.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Collaborative Lifecycle Management Search vendor "Ibm" for product "Rational Collaborative Lifecycle Management" | 5.0.2 Search vendor "Ibm" for product "Rational Collaborative Lifecycle Management" and version "5.0.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Team Concert Search vendor "Ibm" for product "Rational Team Concert" | 6.0.0 Search vendor "Ibm" for product "Rational Team Concert" and version "6.0.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Team Concert Search vendor "Ibm" for product "Rational Team Concert" | 6.0.1 Search vendor "Ibm" for product "Rational Team Concert" and version "6.0.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Collaborative Lifecycle Management Search vendor "Ibm" for product "Rational Collaborative Lifecycle Management" | 6.0.0 Search vendor "Ibm" for product "Rational Collaborative Lifecycle Management" and version "6.0.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Collaborative Lifecycle Management Search vendor "Ibm" for product "Rational Collaborative Lifecycle Management" | 6.0.1 Search vendor "Ibm" for product "Rational Collaborative Lifecycle Management" and version "6.0.1" | - |
Affected
| ||||||