CVE-2016-8982: Infoleak

Published Feb 1, 2017

Updated

IBM InfoSphere Information Server stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history.

Affected Software

3 affected components

IBM InfoSphere DataStage=8.7

IBM InfoSphere DataStage=9.1

IBM InfoSphere DataStage=11.3

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg21995895

Event History

Feb 1, 2017

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

DescriptionWeakness

Data Sourced

via NVD·10:59 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2016-8982?

CVE-2016-8982 is considered a medium severity vulnerability due to the potential for information disclosure.

How do I fix CVE-2016-8982?

To fix CVE-2016-8982, ensure that sensitive information is not included in URL parameters and implement secure coding practices.

What systems are affected by CVE-2016-8982?

CVE-2016-8982 affects IBM InfoSphere DataStage versions 8.7, 9.1, and 11.3.

What type of vulnerability is CVE-2016-8982?

CVE-2016-8982 is an information disclosure vulnerability that exposes sensitive data through URL parameters.

Who is at risk from CVE-2016-8982?

Organizations using affected versions of IBM InfoSphere DataStage may be at risk if unauthorized users gain access to server logs or URLs.