CVE-2016-5896
Severity Score
5.3
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
IBM Maximo Asset Management could disclose sensitive information from a stack trace after submitting incorrect login onto Cognos browser.
IBM Maximo Asset Management podría revelar información sensible de una traza de pila después de la presentación de inicio de sesión incorrecto en el navegador de Cognos.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2016-06-29 CVE Reserved
- 2017-02-01 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/93872 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.ibm.com/support/docview.wss?uid=swg21987855 | 2017-02-13 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Ibm Search vendor "Ibm" | Maximo Asset Management Search vendor "Ibm" for product "Maximo Asset Management" | 7.6 Search vendor "Ibm" for product "Maximo Asset Management" and version "7.6" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Aviation Search vendor "Ibm" for product "Maximo For Aviation" | 7.6 Search vendor "Ibm" for product "Maximo For Aviation" and version "7.6" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Life Sciences Search vendor "Ibm" for product "Maximo For Life Sciences" | 7.6 Search vendor "Ibm" for product "Maximo For Life Sciences" and version "7.6" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Nuclear Power Search vendor "Ibm" for product "Maximo For Nuclear Power" | 7.6 Search vendor "Ibm" for product "Maximo For Nuclear Power" and version "7.6" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Oil And Gas Search vendor "Ibm" for product "Maximo For Oil And Gas" | 7.6 Search vendor "Ibm" for product "Maximo For Oil And Gas" and version "7.6" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Transportation Search vendor "Ibm" for product "Maximo For Transportation" | 7.6 Search vendor "Ibm" for product "Maximo For Transportation" and version "7.6" | - |
Affected
| ||||||