CVE-2016-0252

MEDIUM

IBM Control Center <6.0.0.1-5.4.2.1 - Info Disclosure

Title source: llm

Description

IBM Control Center 6.x before 6.0.0.1 iFix06 and Sterling Control Center 5.4.x before 5.4.2.1 iFix09 allow local users to decrypt the master key via unspecified vectors.

References (1)

[Vendor Advisory] http://www-01.ibm.com/support/docview.wss?uid=swg21985641

Scores

CVSS v3 5.1

EPSS 0.0005

EPSS Percentile 15.4%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Classification

CWE

CWE-200

Status draft

Affected Products (7)

ibm/control_center

ibm/sterling_control_center

Timeline

Published Jul 08, 2016

Tracked Since Feb 18, 2026