6.5
CVE-2016-2865
- EPSS 1.05%
- Veröffentlicht 15.07.2016 18:59:07
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Erkennungen
LoginThe GIT Integration component in IBM Rational Team Concert (RTC) 5.x before 5.0.2 iFix14 and 6.x before 6.0.1 iFix5 and Rational Collaborative Lifecycle Management 5.x before 5.0.2 iFix14 and 6.x before 6.0.1 iFix5 allows remote authenticated users to obtain sensitive information via a malformed request.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Rational Team Concert Version 5.0.0
Ibm ≫ Rational Team Concert Version 5.0.1
Ibm ≫ Rational Team Concert Version 5.0.2
Ibm ≫ Rational Collaborative Lifecycle Management Version 5.0.0
Ibm ≫ Rational Collaborative Lifecycle Management Version 5.0.1
Ibm ≫ Rational Collaborative Lifecycle Management Version 5.0.2
Ibm ≫ Rational Team Concert Version 6.0.0
Ibm ≫ Rational Team Concert Version 6.0.1
Ibm ≫ Rational Collaborative Lifecycle Management Version 6.0.0
Ibm ≫ Rational Collaborative Lifecycle Management Version 6.0.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.05% | 0.599 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 6.5 | 2.8 | 3.6 |
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
| NIST | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:P/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
http://www-01.ibm.com/support/docview.wss?uid=swg21985865
http://www.securityfocus.com/bid/91680