CVE-2016-0231: Infoleak

Published Feb 15, 2016

Updated

IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Services (CPS) 3.0.0 before FP12 allows remote authenticated users to obtain sensitive information by reading exception details in error logs.

Affected Software

1 affected component

IBM Financial Transaction Manager=3.0.0.0

Event History

Feb 15, 2016

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-0231?

CVE-2016-0231 has a medium severity rating, indicating significant risk due to the potential exposure of sensitive information.

How do I fix CVE-2016-0231?

To mitigate CVE-2016-0231, upgrade IBM Financial Transaction Manager to version 3.0.0.12 or later.

What systems are affected by CVE-2016-0231?

CVE-2016-0231 affects IBM Financial Transaction Manager version 3.0.0.0 before FP12.

What type of vulnerability is CVE-2016-0231?

CVE-2016-0231 is an information disclosure vulnerability that allows remote authenticated users to access sensitive information.

Can CVE-2016-0231 be exploited without authentication?

No, CVE-2016-0231 requires remote authenticated access to exploit the information disclosure.