CVE-2016-0304 - Vulnerability Details

Vendors	Products
Ibm	Domino

Link	Providers
http://www-01.ibm.com/support/docview.wss?uid=swg21983328

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2016-05-26T00:00:00", "descriptions": [{"lang": "en", "value": "The Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vectors, aka SPR KLYHA7MM3J.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-0920."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2016-06-29T01:57:01", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21983328"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@us.ibm.com", "ID": "CVE-2016-0304", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vectors, aka SPR KLYHA7MM3J.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-0920."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://www-01.ibm.com/support/docview.wss?uid=swg21983328", "refsource": "CONFIRM", "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21983328"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T22:15:23.312Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21983328"}]}]}, "cveMetadata": {"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2016-0304", "datePublished": "2016-06-29T01:00:00", "dateReserved": "2015-12-08T00:00:00", "dateUpdated": "2024-08-05T22:15:23.312Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : n/a (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

datePublic : 2016-05-26T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : The Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vectors, aka SPR KLYHA7MM3J. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-0920. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : n/a (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2016-06-29T01:57:01 (string)

orgId : 9a959283-ebb5-44b6-b705-dcc2bbced522 (string)

shortName : ibm (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : http://www-01.ibm.com/support/docview.wss?uid=swg21983328 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : psirt@us.ibm.com (string)

ID : CVE-2016-0304 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : n/a (string)

version : { »

version_data : [ »

0 : { »

version_value : n/a (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : The Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vectors, aka SPR KLYHA7MM3J. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-0920. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : n/a (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : http://www-01.ibm.com/support/docview.wss?uid=swg21983328 (string)

refsource : CONFIRM (string)

url : http://www-01.ibm.com/support/docview.wss?uid=swg21983328 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-05T22:15:23.312Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : http://www-01.ibm.com/support/docview.wss?uid=swg21983328 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 9a959283-ebb5-44b6-b705-dcc2bbced522 (string)

assignerShortName : ibm (string)

cveId : CVE-2016-0304 (string)

datePublished : 2016-06-29T01:00:00 (string)

dateReserved : 2015-12-08T00:00:00 (string)

dateUpdated : 2024-08-05T22:15:23.312Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:domino:8.5.3:*:*:*:*:*:*:*", "matchCriteriaId": "091D9954-232A-4158-A516-35A735343121", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:domino:8.5.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "DCB85F5F-867C-403C-9671-6DEFF66FCBDD", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:domino:8.5.3.2:*:*:*:*:*:*:*", "matchCriteriaId": "ABFDECA7-0DBE-41C7-A589-D342E0628BAD", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:domino:8.5.3.3:*:*:*:*:*:*:*", "matchCriteriaId": "8F5B2A8B-7F17-40AE-AD7E-ADEAFF12BCFC", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:domino:8.5.3.4:*:*:*:*:*:*:*", "matchCriteriaId": "4FE3A838-8EB0-4D62-95CD-B882D61AA3C8", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:domino:8.5.3.5:*:*:*:*:*:*:*", "matchCriteriaId": "589D1CE3-A23C-4E7F-AD60-0B14BFD993A3", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:domino:8.5.3.6:*:*:*:*:*:*:*", "matchCriteriaId": "BBAD0259-8096-41CD-BA06-58E26F2821C2", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:domino:8.5.2:*:*:*:*:*:*:*", "matchCriteriaId": "2F2A7894-14F0-4FD9-A221-4A88E5CB6A0E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:domino:8.5.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "D80AF2E5-2756-4111-90B0-08039B9D07C4", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:domino:8.5.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "9E8FCBAE-79BC-4BD3-AE5C-06C53D7A1F9C", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:domino:8.5.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "83A143B4-D4D5-498E-B50F-4CCF7EF6538B", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:domino:8.5.2.4:*:*:*:*:*:*:*", "matchCriteriaId": "89453928-C022-45DD-9277-D8CF669DDB6C", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:domino:8.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "C1D658AF-65B4-4DD7-B445-E16615EA5D82", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:domino:8.5.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "7B275FDF-B31D-4761-9CA5-4FFF2F439964", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:domino:8.5.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "7FE36CC5-3991-4579-8B61-D97B09337F7A", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:domino:8.5.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "931135FE-DA7D-4466-B830-CC07A9F0BCDB", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:domino:8.5.1.4:*:*:*:*:*:*:*", "matchCriteriaId": "A3D932FB-331E-4FB7-AF70-263B8D504654", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:domino:8.5.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "20872C07-8850-4DE0-BE9E-D57E28B6647D", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:domino:8.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "8458C5E0-40D5-41B6-BBB3-4EE1600BE1F0", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:domino:9.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "373527AD-D128-41CC-BEBA-6581F22D8AEE", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:domino:9.0.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "8B9E1334-7CE9-406A-8CE5-FF48823A25B0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:domino:9.0.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "B0AE9534-83FC-44EC-A04B-F81BDA2CC9D2", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:domino:9.0.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "BF7A97DE-36BC-4DFC-9F44-EF2C155703B7", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:domino:9.0.1.4:*:*:*:*:*:*:*", "matchCriteriaId": "4C05B1F1-EDFC-46AC-B701-13652ABA7065", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:domino:9.0.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "D246A5C6-E12D-4B5D-8319-0A9F52899173", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vectors, aka SPR KLYHA7MM3J.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-0920."}, {"lang": "es", "value": "La Consola de Java en IBM Domino 8.5.x en versiones anteriores a 8.5.3 FP6 IF13 y 9.x en versiones anteriores a 9.0.1 FP6, cuando se utiliza una cierta configuraci\u00f3n no compatible que involucra nombres de ruta compartidos UNC, permite a atacantes remotos eludir autenticaci\u00f3n y posiblemente ejecutar c\u00f3digo arbitrario a trav\u00e9s de vectores no especificados, tambi\u00e9n conocida como SPR KLYHA7MM3J. NOTA: esta vulnerabilidad existe debido a una soluci\u00f3n incompleta para CVE-2011-0920."}], "id": "CVE-2016-0304", "lastModified": "2025-04-12T10:46:40.837", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 2.2, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2016-06-29T01:59:06.840", "references": [{"source": "psirt@us.ibm.com", "tags": ["Vendor Advisory"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21983328"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21983328"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-284"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:ibm:domino:8.5.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 091D9954-232A-4158-A516-35A735343121 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:ibm:domino:8.5.3.1:*:*:*:*:*:*:* (string)

matchCriteriaId : DCB85F5F-867C-403C-9671-6DEFF66FCBDD (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:ibm:domino:8.5.3.2:*:*:*:*:*:*:* (string)

matchCriteriaId : ABFDECA7-0DBE-41C7-A589-D342E0628BAD (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:ibm:domino:8.5.3.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 8F5B2A8B-7F17-40AE-AD7E-ADEAFF12BCFC (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:ibm:domino:8.5.3.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 4FE3A838-8EB0-4D62-95CD-B882D61AA3C8 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:ibm:domino:8.5.3.5:*:*:*:*:*:*:* (string)

matchCriteriaId : 589D1CE3-A23C-4E7F-AD60-0B14BFD993A3 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:ibm:domino:8.5.3.6:*:*:*:*:*:*:* (string)

matchCriteriaId : BBAD0259-8096-41CD-BA06-58E26F2821C2 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:ibm:domino:8.5.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 2F2A7894-14F0-4FD9-A221-4A88E5CB6A0E (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:ibm:domino:8.5.2.1:*:*:*:*:*:*:* (string)

matchCriteriaId : D80AF2E5-2756-4111-90B0-08039B9D07C4 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:ibm:domino:8.5.2.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 9E8FCBAE-79BC-4BD3-AE5C-06C53D7A1F9C (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:ibm:domino:8.5.2.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 83A143B4-D4D5-498E-B50F-4CCF7EF6538B (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:ibm:domino:8.5.2.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 89453928-C022-45DD-9277-D8CF669DDB6C (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

2 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:ibm:domino:8.5.1:*:*:*:*:*:*:* (string)

matchCriteriaId : C1D658AF-65B4-4DD7-B445-E16615EA5D82 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:ibm:domino:8.5.1.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 7B275FDF-B31D-4761-9CA5-4FFF2F439964 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:ibm:domino:8.5.1.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 7FE36CC5-3991-4579-8B61-D97B09337F7A (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:ibm:domino:8.5.1.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 931135FE-DA7D-4466-B830-CC07A9F0BCDB (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:ibm:domino:8.5.1.4:*:*:*:*:*:*:* (string)

matchCriteriaId : A3D932FB-331E-4FB7-AF70-263B8D504654 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:ibm:domino:8.5.1.5:*:*:*:*:*:*:* (string)

matchCriteriaId : 20872C07-8850-4DE0-BE9E-D57E28B6647D (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

3 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:ibm:domino:8.5.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 8458C5E0-40D5-41B6-BBB3-4EE1600BE1F0 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

4 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:ibm:domino:9.0.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 373527AD-D128-41CC-BEBA-6581F22D8AEE (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:ibm:domino:9.0.1.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 8B9E1334-7CE9-406A-8CE5-FF48823A25B0 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:ibm:domino:9.0.1.2:*:*:*:*:*:*:* (string)

matchCriteriaId : B0AE9534-83FC-44EC-A04B-F81BDA2CC9D2 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:ibm:domino:9.0.1.3:*:*:*:*:*:*:* (string)

matchCriteriaId : BF7A97DE-36BC-4DFC-9F44-EF2C155703B7 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:ibm:domino:9.0.1.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 4C05B1F1-EDFC-46AC-B701-13652ABA7065 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:ibm:domino:9.0.1.5:*:*:*:*:*:*:* (string)

matchCriteriaId : D246A5C6-E12D-4B5D-8319-0A9F52899173 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : The Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vectors, aka SPR KLYHA7MM3J. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-0920. (string)

}

1 : { »

lang : es (string)

value : La Consola de Java en IBM Domino 8.5.x en versiones anteriores a 8.5.3 FP6 IF13 y 9.x en versiones anteriores a 9.0.1 FP6, cuando se utiliza una cierta configuración no compatible que involucra nombres de ruta compartidos UNC, permite a atacantes remotos eludir autenticación y posiblemente ejecutar código arbitrario a través de vectores no especificados, también conocida como SPR KLYHA7MM3J. NOTA: esta vulnerabilidad existe debido a una solución incompleta para CVE-2011-0920. (string)

}

]

id : CVE-2016-0304 (string)

lastModified : 2025-04-12T10:46:40.837 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : MEDIUM (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : PARTIAL (string)

baseScore : 6.8 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : PARTIAL (string)

vectorString : AV:N/AC:M/Au:N/C:P/I:P/A:P (string)

version : 2.0 (string)

}

exploitabilityScore : 8.6 (number)

impactScore : 6.4 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 8.1 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.0 (string)

}

exploitabilityScore : 2.2 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2016-06-29T01:59:06.840 (string)

references : [ »

0 : { »

source : psirt@us.ibm.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://www-01.ibm.com/support/docview.wss?uid=swg21983328 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://www-01.ibm.com/support/docview.wss?uid=swg21983328 (string)

}

]

sourceIdentifier : psirt@us.ibm.com (string)

vulnStatus : Deferred (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-284 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object