CVE-2016-0385 Information

Description

Buffer overflow in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43 8.0 before 8.0.0.13 8.5 before 8.5.5.10 9.0 before 9.0.0.1 and Liberty before 16.0.0.3 when HttpSessionIdReuse is enabled allows remote authenticated users to obtain sensitive information via unspecified vectors.

CVSS Vector

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Reference

http://www.securityfocus.com/bid/92505 http://www.securitytracker.com/id/1036654 http://www-01.ibm.com/support/docview.wss?uid=swg1PI60026 http://www-01.ibm.com/support/docview.wss?uid=swg21982588

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction Required

LOW

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

LOW

Availability Impact

NONE

Base Score

NONE

Base Severity

3.1