CVE-2016-6029

CWE-200 — Information Exposure3 documents3 sources

Severity

5.9MEDIUM

EPSS

0.2%

top 57.46%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Emptoris Strategic Supply Management

Timeline

PublishedAug 14

Latest updateMay 17

Description

IBM Emptoris Strategic Supply Management Platform 10.0 and 10.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 116881.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 2.2 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5ibm/emptoris_strategic_supply_management6 versions+5

▶NVDibm/emptoris_strategic_supply_management46 versions+45

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

GHSA

GHSA-mm2m-8vf5-7472: IBM Emptoris Strategic Supply Management Platform 10↗2022-05-17

▶

CVEList

CVE-2016-6029: IBM Emptoris Strategic Supply Management Platform 10↗2017-08-14

▶