CVE-2016-2882

MEDIUM

IBM Tririga Application Platform - Information Disclosure

Title source: rule

Description

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to obtain sensitive information by reading HTTP responses.

References (2)

Scores

CVSS v3 4.3
EPSS 0.0015
EPSS Percentile 36.1%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Classification

CWE
CWE-200
Status draft

Affected Products (22)

ibm/tririga_application_platform
ibm/tririga_application_platform
ibm/tririga_application_platform
ibm/tririga_application_platform
ibm/tririga_application_platform
ibm/tririga_application_platform
ibm/tririga_application_platform
ibm/tririga_application_platform
ibm/tririga_application_platform
ibm/tririga_application_platform
ibm/tririga_application_platform
ibm/tririga_application_platform
ibm/tririga_application_platform
ibm/tririga_application_platform
ibm/tririga_application_platform
... and 7 more

Timeline

Published Jul 02, 2016
Tracked Since Feb 18, 2026