CVE-2016-6083: Infoleak
Published Jun 27, 2017
·Updated
IBM Tivoli Monitoring V6 could allow an unauthenticated user to access SOAP queries that could contain sensitive information. IBM X-Force ID: 117696.
Affected Software
26 affected components
IBM Tivoli Monitoring=6.2.2
IBM Tivoli Monitoring=6.2.2.0
IBM Tivoli Monitoring=6.2.2.1
IBM Tivoli Monitoring=6.2.2.2
IBM Tivoli Monitoring=6.2.2.3
IBM Tivoli Monitoring=6.2.2.4
IBM Tivoli Monitoring=6.2.2.5
IBM Tivoli Monitoring=6.2.2.6
IBM Tivoli Monitoring=6.2.2.7
IBM Tivoli Monitoring=6.2.2.8
IBM Tivoli Monitoring=6.2.2.9
IBM Tivoli Monitoring=6.2.3
IBM Tivoli Monitoring=6.2.3.0
IBM Tivoli Monitoring=6.2.3.1
IBM Tivoli Monitoring=6.2.3.2
IBM Tivoli Monitoring=6.2.3.3
IBM Tivoli Monitoring=6.2.3.4
IBM Tivoli Monitoring=6.2.3.5
IBM Tivoli Monitoring=6.3.0
IBM Tivoli Monitoring=6.3.0.1
IBM Tivoli Monitoring=6.3.0.2
IBM Tivoli Monitoring=6.3.0.3
IBM Tivoli Monitoring=6.3.0.4
IBM Tivoli Monitoring=6.3.0.5
IBM Tivoli Monitoring=6.3.0.6
IBM Tivoli Monitoring=6.3.0.7
Remediation
Patch Available
Event History
Jun 27, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2016-6083?
The severity of CVE-2016-6083 is classified as high due to potential exposure of sensitive information.
2
How do I fix CVE-2016-6083?
To fix CVE-2016-6083, apply the latest security patches provided by IBM for affected Tivoli Monitoring versions.
3
What versions of IBM Tivoli Monitoring are affected by CVE-2016-6083?
CVE-2016-6083 affects multiple versions including 6.2.2, 6.2.3, and 6.3.0 of IBM Tivoli Monitoring.
4
Can CVE-2016-6083 be exploited remotely?
Yes, CVE-2016-6083 can be exploited remotely by unauthenticated users if the vulnerable service is accessible.
5
What type of data exposure is associated with CVE-2016-6083?
CVE-2016-6083 may lead to unauthorized access to sensitive information via SOAP queries.