NVD

Id
16806  
Name
CVE-2016-0385  
Description
Buffer overflow in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 before 8.5.5.10, 9.0 before 9.0.0.1, and Liberty before 16.0.0.3, when HttpSessionIdReuse is enabled, allows remote authenticated users to obtain sensitive information via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-09-01  
Modified Date
2016-11-28  
Seq
2016-0385  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
93402 16806 CVE-2016-0385 PI60026  View
93403 16806 CVE-2016-0385 http://www-01.ibm.com/support/docview.wss?uid=swg21982588  View
93404 16806 CVE-2016-0385 92505  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
3737 JVNDB-2016-004510 IBM WebSphere Application Server におけるバッファオーバーフローの脆弱性 IBM WebSphere Application Server (WAS) には、HttpSessionIdReuse が有効になっている場合、バッファオーバーフローの脆弱性が存在します。 CVE-2016-0385 86589 CVE-2016-0385 16806 3.5 3.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004510.html 2016-08-16 2016-09-02 View