CVE-2016-0385

EPSS 0.25%
Published 01.09.2016 10:59:00
Last modified 12.04.2025 10:46:40
Source psirt@us.ibm.com
Teams watchlist Login
Open Login

Buffer overflow in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 before 8.5.5.10, 9.0 before 9.0.0.1, and Liberty before 16.0.0.3, when HttpSessionIdReuse is enabled, allows remote authenticated users to obtain sensitive information via unspecified vectors.

Affected products Warnungen 0 Metrics 3 CWE 2 References 7

Data is provided by the National Vulnerability Database (NVD)

Ibm ≫ Websphere Application Server Version7.0

Ibm ≫ Websphere Application Server Version7.0.0.0

Ibm ≫ Websphere Application Server Version7.0.0.1

Ibm ≫ Websphere Application Server Version7.0.0.2

Ibm ≫ Websphere Application Server Version7.0.0.3

Ibm ≫ Websphere Application Server Version7.0.0.4

Ibm ≫ Websphere Application Server Version7.0.0.5

Ibm ≫ Websphere Application Server Version7.0.0.6

Ibm ≫ Websphere Application Server Version7.0.0.7

Ibm ≫ Websphere Application Server Version7.0.0.8

Ibm ≫ Websphere Application Server Version7.0.0.9

Ibm ≫ Websphere Application Server Version7.0.0.10

Ibm ≫ Websphere Application Server Version7.0.0.11

Ibm ≫ Websphere Application Server Version7.0.0.12

Ibm ≫ Websphere Application Server Version7.0.0.13

Ibm ≫ Websphere Application Server Version7.0.0.14

Ibm ≫ Websphere Application Server Version7.0.0.15

Ibm ≫ Websphere Application Server Version7.0.0.16

Ibm ≫ Websphere Application Server Version7.0.0.17

Ibm ≫ Websphere Application Server Version7.0.0.18

Ibm ≫ Websphere Application Server Version7.0.0.19

Ibm ≫ Websphere Application Server Version7.0.0.21

Ibm ≫ Websphere Application Server Version7.0.0.22

Ibm ≫ Websphere Application Server Version7.0.0.23

Ibm ≫ Websphere Application Server Version7.0.0.24

Ibm ≫ Websphere Application Server Version7.0.0.25

Ibm ≫ Websphere Application Server Version7.0.0.27

Ibm ≫ Websphere Application Server Version7.0.0.28

Ibm ≫ Websphere Application Server Version7.0.0.29

Ibm ≫ Websphere Application Server Version7.0.0.31

Ibm ≫ Websphere Application Server Version7.0.0.32

Ibm ≫ Websphere Application Server Version7.0.0.33

Ibm ≫ Websphere Application Server Version7.0.0.34

Ibm ≫ Websphere Application Server Version7.0.0.35

Ibm ≫ Websphere Application Server Version7.0.0.36

Ibm ≫ Websphere Application Server Version7.0.0.37

Ibm ≫ Websphere Application Server Version7.0.0.38

Ibm ≫ Websphere Application Server Version7.0.0.39

Ibm ≫ Websphere Application Server Version7.0.0.41

Ibm ≫ Websphere Application Server Version8.0

Ibm ≫ Websphere Application Server Version8.0.0.0

Ibm ≫ Websphere Application Server Version8.0.0.1

Ibm ≫ Websphere Application Server Version8.0.0.2

Ibm ≫ Websphere Application Server Version8.0.0.3

Ibm ≫ Websphere Application Server Version8.0.0.4

Ibm ≫ Websphere Application Server Version8.0.0.5

Ibm ≫ Websphere Application Server Version8.0.0.6

Ibm ≫ Websphere Application Server Version8.0.0.7

Ibm ≫ Websphere Application Server Version8.0.0.8

Ibm ≫ Websphere Application Server Version8.0.0.9

Ibm ≫ Websphere Application Server Version8.0.0.10

Ibm ≫ Websphere Application Server Version8.0.0.11

Ibm ≫ Websphere Application Server Version8.0.0.12

Ibm ≫ Websphere Application Server Version8.5.0.0

Ibm ≫ Websphere Application Server Version8.5.0.0 Update- Editionliberty_profile

Ibm ≫ Websphere Application Server Version8.5.0.1 Update- Editionliberty_profile

Ibm ≫ Websphere Application Server Version8.5.0.2 Update- Editionliberty_profile

Ibm ≫ Websphere Application Server Version8.5.5.0 Update- Editionliberty_profile

Ibm ≫ Websphere Application Server Version8.5.5.1 Update- Editionliberty_profile

Ibm ≫ Websphere Application Server Version8.5.5.2 Update- Editionliberty_profile

Ibm ≫ Websphere Application Server Version8.5.5.4

Ibm ≫ Websphere Application Server Version8.5.5.5

Ibm ≫ Websphere Application Server Version8.5.5.6

Ibm ≫ Websphere Application Server Version8.5.5.7

Ibm ≫ Websphere Application Server Version8.5.5.8

Ibm ≫ Websphere Application Server Version8.5.5.9

Ibm ≫ Websphere Application Server Version9.0.0.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.25%	0.478

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	3.1	1.6	1.4	CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
nvd@nist.gov	3.5	6.8	2.9	AV:N/AC:M/Au:S/C:P/I:N/A:N

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www-01.ibm.com/support/docview.wss?uid=swg1PI60026

Not Applicable

http://www-01.ibm.com/support/docview.wss?uid=swg21982588

Patch

Vendor Advisory

Mitigation

http://www.securityfocus.com/bid/92505

http://www.securitytracker.com/id/1036654

https://nvd.nist.gov/vuln/detail/CVE-2016-0385

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-0385

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-0385

EUVD