VulnerabilityModified
CVE-2016-0203
A vulnerability has been identified in the IBM Cloud Orchestrator task API.
MEDIUM 5.5EPSS 0.35%
Does this matter?
Lower severity and a low EPSS score (0.35%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability has been identified in the IBM Cloud Orchestrator task API. The task API might allow an authenticated user to view background information associated with actions performed on virtual machines in projects where the user belongs to.
- CVSS 3.0
- 5.5 MEDIUMCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.35% probability · 28th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- ibm/cloud orchestrator · ibm/smartcloud orchestrator
- Source
- psirt@us.ibm.com
References
- http://www.ibm.com/support/docview.wss?uid=swg2C1000140Patch, Vendor Advisory
- http://www.securityfocus.com/bid/94440Third Party Advisory, VDB Entry
- http://www.ibm.com/support/docview.wss?uid=swg2C1000140Patch, Vendor Advisory
- http://www.securityfocus.com/bid/94440Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.