CVE-2016-0247: Infoleak

Published Oct 22, 2016

Updated

IBM Security Guardium 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows local users to obtain sensitive cleartext information via unspecified vectors, as demonstrated by password information.

Affected Software

7 affected components

IBM Security Guardium=8.2

IBM Security Guardium=9.0

IBM Security Guardium=9.1

IBM Security Guardium=9.5

IBM Security Guardium=10.0

IBM Security Guardium=10.1

IBM Security Guardium=10.01

Remediation

Patch Available

http://www-01.ibm.com/support/docview.wss?uid=swg21990368

Event History

Oct 22, 2016

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-0247?

CVE-2016-0247 is considered to be of moderate severity due to its potential to expose sensitive information.

How do I fix CVE-2016-0247?

To fix CVE-2016-0247, upgrade to the patched versions of IBM Security Guardium: 8.2 p310, 9.x p700, or 10.x p100.

Who is affected by CVE-2016-0247?

CVE-2016-0247 affects local users of IBM Security Guardium versions 8.2, 9.x before p700, and 10.x before p100.

What type of information can be exposed by CVE-2016-0247?

CVE-2016-0247 may allow local users to access sensitive cleartext information, including passwords.

Are there any workarounds for CVE-2016-0247?

There are no known workarounds for CVE-2016-0247; the recommended action is to apply the appropriate software updates.