First published: Sat Oct 22 2016(Updated: )
IBM Security Guardium 10.x through 10.1 before p100 allows remote authenticated users to obtain sensitive information by reading an Application Error message.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM InfoSphere Guardium z/OS | =10.0 | |
IBM InfoSphere Guardium z/OS | =10.1 | |
IBM InfoSphere Guardium z/OS | =10.01 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-0242 is classified as a medium severity vulnerability due to the potential exposure of sensitive information.
To mitigate CVE-2016-0242, upgrade IBM Security Guardium to version 10.1 p100 or later.
CVE-2016-0242 allows remote authenticated users to gain sensitive information through application error messages.
Yes, CVE-2016-0242 affects IBM Security Guardium versions 10.0 to 10.1 before p100.
Remote authenticated users of IBM Security Guardium 10.x before p100 are affected by CVE-2016-0242.