CVE-2016-0275: Infoleak
IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (FTM) for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013 allows local users to obtain sensitive information via vectors related to cacheable HTTPS responses.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0275?
The severity of CVE-2016-0275 is low, with a severity value of 3.3.
Which IBM Financial Transaction Manager versions are affected by CVE-2016-0275?
IBM Financial Transaction Manager (FTM) for ACH Services, Check Services, and Corporate Payment Services versions 2.1.1.2 and 3.0.0.x before fp0013 are affected.
How can I fix CVE-2016-0275?
IBM has released fix packs for IBM Financial Transaction Manager (FTM) versions 2.1.1.2 and 3.0.0.x. Apply fix pack fp0013 or a later version to mitigate this vulnerability.
Where can I find more information about CVE-2016-0275?
You can find more information about CVE-2016-0275 on the IBM Support website at the following link: http://www-01.ibm.com/support/docview.wss?uid=swg21977245
What is the Common Weakness Enumeration (CWE) ID for CVE-2016-0275?
The Common Weakness Enumeration (CWE) ID for CVE-2016-0275 is 200.