PT-2017-8845

CVE-2016-6001

·

Published

2017-02-01

·

Updated

2017-02-15

Description by

CVSS 2.0
3.5
Low
MetricsAV:N/AC:M/Au:S/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions IBM Forms Experience Builder (affected versions not specified)
Description The issue allows for server-side request forgery (SSRF) from the application design interface, potentially leading to some information disclosure of internal resources.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Weakness enumeration
CWE-918: Server-Side Request Forgery (SSRF)
Related identifiers
CVE-2016-6001
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com