CVE-2016-0231: Infoleak
First published: Mon Feb 15 2016(Updated: )
IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Services (CPS) 3.0.0 before FP12 allows remote authenticated users to obtain sensitive information by reading exception details in error logs.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Financial Transaction Manager | =3.0.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI56757
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI56758
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI56759
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI56762
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI56763
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI56764
- http://www-01.ibm.com/support/docview.wss?uid=swg21976392
Frequently Asked Questions
What is the severity of CVE-2016-0231?
CVE-2016-0231 has a medium severity rating, indicating significant risk due to the potential exposure of sensitive information.
How do I fix CVE-2016-0231?
To mitigate CVE-2016-0231, upgrade IBM Financial Transaction Manager to version 3.0.0.12 or later.
What systems are affected by CVE-2016-0231?
CVE-2016-0231 affects IBM Financial Transaction Manager version 3.0.0.0 before FP12.
What type of vulnerability is CVE-2016-0231?
CVE-2016-0231 is an information disclosure vulnerability that allows remote authenticated users to access sensitive information.
Can CVE-2016-0231 be exploited without authentication?
No, CVE-2016-0231 requires remote authenticated access to exploit the information disclosure.
- agent/type
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/weakness
- agent/author
- agent/references
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/tags
- agent/event
- agent/first-publish-date
- agent/source
- vendor/ibm
- canonical/ibm financial transaction manager
- version/ibm financial transaction manager/3.0.0.0