IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.x before 8.0.0.13, 8.5.x before 8.5.5.11, 9.0.x before 9.0.0.2, and Liberty before 16.0.0.3 mishandles responses, which allows remote attackers to obtain sensitive information via unspecified vectors.
References
Link | Resource |
---|---|
http://www-01.ibm.com/support/docview.wss?uid=swg1PI67093 | Not Applicable |
http://www-01.ibm.com/support/docview.wss?uid=swg21990056 | Patch Vendor Advisory |
http://www.securityfocus.com/bid/93013 | |
http://www.securitytracker.com/id/1036838 |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
No history.
Information
Published : 2016-10-01 01:59
Updated : 2024-02-04 18:53
NVD link : CVE-2016-5986
Mitre link : CVE-2016-5986
CVE.ORG link : CVE-2016-5986
JSON object : View
Products Affected
ibm
- websphere_application_server
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor