CVE-2016-2908: XEE
IBM Single Sign On for Bluemix could allow a remote attacker to obtain sensitive information, caused by a XML external entity (XXE) error when processing XML data by the XML parser. A remote attacker could exploit this vulnerability to read arbitrary files on the system or cause a denial of service.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-2908?
CVE-2016-2908 has been rated as a moderate severity vulnerability due to its potential to leak sensitive information and cause denial of service.
How do I fix CVE-2016-2908?
To fix CVE-2016-2908, update to the latest patched version of IBM Security Access Manager or IBM Security Access Manager for Mobile.
What vulnerabilities does CVE-2016-2908 affect?
CVE-2016-2908 affects IBM Security Access Manager and IBM Security Access Manager for Mobile versions 8.0 and 9.0.
Can CVE-2016-2908 lead to file exposure?
Yes, CVE-2016-2908 can allow a remote attacker to read arbitrary files on the system due to XML external entity (XXE) vulnerabilities.
Is CVE-2016-2908 remote exploitable?
Yes, CVE-2016-2908 can be exploited remotely by attackers to access sensitive information.