CVE-2016-0389

MEDIUM

IBM WebSphere Application Server 8.5.5.2-8.5.5.9 - Exposure of Sensitive Information via Admin Center

Title source: llm

Description

Admin Center in IBM WebSphere Application Server (WAS) 8.5.5.2 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote attackers to obtain sensitive information via unspecified vectors.

References (3)

Core 3

Core References

Vendor Advisory x_refsource_confirm

http://www-01.ibm.com/support/docview.wss?uid=swg21982012

Various Sources vendor-advisory x_refsource_aixapar

http://www-01.ibm.com/support/docview.wss?uid=swg1PI62052

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/91515

Scores

CVSS v3 5.3

EPSS 0.0191

EPSS Percentile 77.3%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE

CWE-200

Status published

Products (8)

ibm/websphere_application_server 8.5.5.2

ibm/websphere_application_server 8.5.5.3

ibm/websphere_application_server 8.5.5.4

ibm/websphere_application_server 8.5.5.5

ibm/websphere_application_server 8.5.5.6

ibm/websphere_application_server 8.5.5.7

ibm/websphere_application_server 8.5.5.8

ibm/websphere_application_server 8.5.5.9

Published Jul 07, 2016

Tracked Since Feb 18, 2026