CVE-2016-5994: Infoleak

Published Feb 1, 2017

Updated

IBM InfoSphere Information Server contains a vulnerability that would allow an authenticated user to browse any file on the engine tier, and examine its contents.

Affected Software

1 affected component

IBM InfoSphere Information Server=11.5

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg21992171

Event History

Feb 1, 2017

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

DescriptionWeakness

Data Sourced

via NVD·08:59 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2016-5994?

CVE-2016-5994 has been assigned a CVSS score indicating a moderate severity level due to potential unauthorized access to sensitive information.

How do I fix CVE-2016-5994?

To fix CVE-2016-5994, apply the latest security patches provided by IBM for InfoSphere Information Server version 11.5.

Who is affected by CVE-2016-5994?

CVE-2016-5994 affects authenticated users of IBM InfoSphere Information Server version 11.5.

What are the implications of CVE-2016-5994?

CVE-2016-5994 allows an authenticated user to browse and read any file on the engine tier, potentially leading to data leakage.

Is CVE-2016-5994 a zero-day vulnerability?

No, CVE-2016-5994 is not a zero-day vulnerability as it has been publicly disclosed and patches are available from IBM.