CVE-2016-0205: Infoleak
Published Aug 30, 2018
·Updated
A vulnerability has been identified in IBM Cloud Orchestrator 2.3, 2.3.0.1, 2.4, and 2.4.0.1 that could allow an attacker after authentication to enumerate valid users of the system. IBM X-Force ID: 109394.
Affected Software
4 affected components
IBM Cloud Orchestrator=2.3.0.0
IBM Cloud Orchestrator=2.3.0.1
IBM Cloud Orchestrator=2.4.0.0
IBM Cloud Orchestrator=2.4.0.1
Remediation
Patch Available
Event History
Aug 30, 2018
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2016-0205?
CVE-2016-0205 is considered to have a medium severity level due to its potential for user enumeration.
2
How do I fix CVE-2016-0205?
To fix CVE-2016-0205, it is recommended to upgrade to IBM Cloud Orchestrator versions 2.4.0.2 or higher.
3
Who is affected by CVE-2016-0205?
CVE-2016-0205 affects users of IBM Cloud Orchestrator versions 2.3, 2.3.0.1, 2.4, and 2.4.0.1.
4
What can an attacker do with CVE-2016-0205?
An attacker with authenticated access can enumerate valid users in the system due to CVE-2016-0205.
5
When was CVE-2016-0205 disclosed?
CVE-2016-0205 was disclosed in March 2016.