NVD

Id
16794  
Name
CVE-2016-0364  
Description
IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 does not properly implement a logging-obfuscation feature for secure properties, which allows remote authenticated users to obtain sensitive information via vectors involving special characters.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-06-30  
Modified Date
2016-07-01  
Seq
2016-0364  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
93358 16794 CVE-2016-0364 http://www-01.ibm.com/support/docview.wss?uid=swg2C1000152  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2610 JVNDB-2016-003383 IBM UrbanCode Deploy における重要な情報を取得される脆弱性 IBM UrbanCode Deploy は、セキュアなプロパティのためのログの難読化機能を適切に実装していないため、重要な情報を取得される脆弱性が存在します。 CVE-2016-0364 86568 CVE-2016-0364 16794 4 4.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003383.html 2016-05-26 2016-07-04 View