CVE-2016-9748: Infoleak
Published Feb 8, 2017
·Updated
IBM Rational DOORS Next Generation 5.0 and 6.0 discloses sensitive information in error response messages that could be used for further attacks against the system.
Affected Software
8 affected components
IBM Rational DOORS Next Generation=5.0
IBM Rational DOORS Next Generation=5.0.0
IBM Rational DOORS Next Generation=5.0.1
IBM Rational DOORS Next Generation=5.0.2
IBM Rational DOORS Next Generation=6.0.0
IBM Rational DOORS Next Generation=6.0.1
IBM Rational DOORS Next Generation=6.0.2
IBM Rational Requirements Composer=4.0.7
Remediation
Patch Available
Event History
Feb 8, 2017
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
DescriptionWeakness
Data Sourced
via NVD·07:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-9748?
CVE-2016-9748 has been classified with medium severity due to potential information disclosure.
2
How do I fix CVE-2016-9748?
To mitigate CVE-2016-9748, you should apply the latest patches or updates provided by IBM for affected versions.
3
What systems are affected by CVE-2016-9748?
CVE-2016-9748 affects IBM Rational DOORS Next Generation versions 5.0 and 6.0, as well as IBM Rational Requirements Composer 4.0.7.
4
What kind of information can be disclosed by CVE-2016-9748?
CVE-2016-9748 can disclose sensitive information through error response messages, which may aid an attacker.
5
Is there a workaround for CVE-2016-9748?
Currently, the best approach for CVE-2016-9748 is to upgrade to a secure version as recommended by IBM.