NVD

Id
18889  
Name
CVE-2016-2945  
Description
The API Discovery implementation in IBM WebSphere Application Server (WAS) 8.5.5.8 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote authenticated users to gain privileges via an external reference in a Swagger document.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-07-07  
Modified Date
2016-11-28  
Seq
2016-2945  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
104788 18889 CVE-2016-2945 PI62450  View
104789 18889 CVE-2016-2945 http://www-01.ibm.com/support/docview.wss?uid=swg21984502  View
104790 18889 CVE-2016-2945 91517  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2730 JVNDB-2016-003503 IBM WebSphere Application Server Liberty Profile の API Discovery の実装における権限を取得される脆弱性 IBM WebSphere Application Server (WAS) Liberty Profile の API Discovery の実装には、権限を取得される脆弱性が存在します。 CVE-2016-2945 89451 CVE-2016-2945 18889 6 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003503.html 2016-06-21 2016-07-12 View