CVE Daily

CVE-2016-0378

IBM WebSphere Application Server (WAS) Liberty before 16.0.0.3, when the install...

Low CVSS 3.7

Overview

IBM WebSphere Application Server (WAS) Liberty before 16.0.0.3, when the installation lacks a default error page, allows remote attackers to obtain sensitive information by triggering an exception.

CWE: CWE-200 Published: 2016-11-24T19:59:10.283
Risk analysis

This vulnerability is rated 🟢 LOW.

  • CVSS: 3.7 (LOW)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags