CVE-2016-5935

Summary

IBM Jazz for Service Management could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the SSL certificate. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.

Affected Software

VendorProductVersion RangeStatus
IBM CorporationTivoli Components1.1affected
IBM CorporationTivoli Components1.1.0.1affected
IBM CorporationTivoli Components1.1.0.2affected
IBM CorporationTivoli Components1.1.0.3affected
IBM CorporationTivoli Components2.1affected
IBM CorporationTivoli Components2.2affected
IBM CorporationTivoli Components1.1.1affected
IBM CorporationTivoli Components1.1.2affected
IBM CorporationTivoli Components1.1.2.1affected
IBM CorporationTivoli Components2.1.1.0affected
IBM CorporationTivoli Components2.1.1.2affected
IBM CorporationTivoli Components1.1.3affected

Weaknesses

  • Obtain Information

ADP Enrichment

CVE Program Container

Additional References

References