CVE-2016-2917

CWE-2645 documents4 sources
Severity
8.8HIGH
EPSS
0.5%
top 33.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Tririga Application Platform
Timeline
PublishedNov 30
Latest updateMay 17

Description

The notifications component in IBM TRIRIGA Applications 10.4 and 10.5 before 10.5.1 allows remote authenticated users to obtain sensitive password information, and consequently gain privileges, via unspecified vectors.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages1 packages

🔴Vulnerability Details

4
GHSA
GHSA-rx3v-5c3w-xjcj: The notifications component in IBM TRIRIGA Applications 10↗2022-05-17
▶
CVEList
CVE-2016-2917: The notifications component in IBM TRIRIGA Applications 10↗2016-11-30
▶
OSV
firefox regressions↗2016-04-19
▶
OSV
firefox regressions↗2016-04-07
▶
CVE-2016-2917 (HIGH CVSS 8.8) | The notifications component in IBM | cvebase.io