CVE-2016-0389

MEDIUM

IBM WAS <8.5.5.9 - Info Disclosure

Title source: llm

Description

Admin Center in IBM WebSphere Application Server (WAS) 8.5.5.2 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote attackers to obtain sensitive information via unspecified vectors.

References (3)

[Various Sources] http://www-01.ibm.com/support/docview.wss?uid=swg1PI62052

[Vendor Advisory] http://www-01.ibm.com/support/docview.wss?uid=swg21982012

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/91515

Scores

CVSS v3 5.3

EPSS 0.0023

EPSS Percentile 45.1%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Classification

CWE

CWE-200

Status draft

Affected Products (8)

ibm/websphere_application_server

Timeline

Published Jul 07, 2016

Tracked Since Feb 18, 2026