CVE-2016-0374

HIGH

IBM TRIRIGA Application Platform <3.3.2.6-<3.5.0.2 - Privilege Esca...

Title source: llm
STIX 2.1

Description

The builder tools in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allow remote authenticated users to gain privileges for application modification via unspecified vectors.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21981729

Scores

CVSS v3 8.8
EPSS 0.0124
EPSS Percentile 65.9%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-264
Status published
Products (25)
ibm/tririga_application_platform 3.3.0.0
ibm/tririga_application_platform 3.3.0.1
ibm/tririga_application_platform 3.3.0.2
ibm/tririga_application_platform 3.3.1.0
ibm/tririga_application_platform 3.3.1.1
ibm/tririga_application_platform 3.3.1.2
ibm/tririga_application_platform 3.3.1.3
ibm/tririga_application_platform 3.3.2.0
ibm/tririga_application_platform 3.3.2.1
ibm/tririga_application_platform 3.3.2.2
... and 15 more
Published Jul 01, 2016
Tracked Since Feb 18, 2026