VulnerabilityModified
CVE-2016-3002
IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows physically proximate attackers to obtain sensitive information by reading cached data on a client device.
LOW 2.1EPSS 0.33%
Does this matter?
Lower severity and a low EPSS score (0.33%). Track it; it rarely justifies an emergency change on its own.
Description
IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows physically proximate attackers to obtain sensitive information by reading cached data on a client device.
- CVSS 3.0
- 2.1 LOWCVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- EPSS
- 0.33% probability · 26th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- ibm/connections
- Source
- psirt@us.ibm.com
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1LO90039Broken Link
- http://www-01.ibm.com/support/docview.wss?uid=swg21990864Vendor Advisory
- http://www.securityfocus.com/bid/94331Third Party Advisory, VDB Entry
- http://www-01.ibm.com/support/docview.wss?uid=swg1LO90039Broken Link
- http://www-01.ibm.com/support/docview.wss?uid=swg21990864Vendor Advisory
- http://www.securityfocus.com/bid/94331Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.