CVE-2016-2917

The notifications component in IBM TRIRIGA Applications 10.4 and 10.5 before 10.5.1 allows remote authenticated users to obtain sensitive password information, and consequently gain privileges, via unspecified vectors.

Score

CVSS 3.0 8.8 High

Status

Modified - psirt@us.ibm.com

Published

2016-11-30

Last modified

2024-08-05

Weaknesses

CWE-264

Affected products

• Tririga Application Platform (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg1IV84740
• http://www-01.ibm.com/support/docview.wss?uid=swg21984304