CVE-2016-2882

MEDIUM

IBM TRIRIGA 3.3-3.3.2.5, 3.4-3.4.2.3, 3.5-3.5.0.1 - Sensitive Info Exposure via HTTP

Title source: llm

Description

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to obtain sensitive information by reading HTTP responses.

References (2)

Core 2

Core References

Patch, Vendor Advisory x_refsource_confirm

http://www-01.ibm.com/support/docview.wss?uid=swg21983343

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/91552

Scores

CVSS v3 4.3

EPSS 0.0084

EPSS Percentile 53.4%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Details

CWE

CWE-200

Status published

Products (22)

ibm/tririga_application_platform 3.3.0.0

ibm/tririga_application_platform 3.3.0.1

ibm/tririga_application_platform 3.3.0.2

ibm/tririga_application_platform 3.3.1.0

ibm/tririga_application_platform 3.3.1.1

ibm/tririga_application_platform 3.3.1.2

ibm/tririga_application_platform 3.3.1.3

ibm/tririga_application_platform 3.3.2.0

ibm/tririga_application_platform 3.3.2.1

ibm/tririga_application_platform 3.3.2.3

... and 12 more

Published Jul 02, 2016

Tracked Since Feb 18, 2026