Vulnerability Description
The API Discovery implementation in IBM WebSphere Application Server (WAS) 8.5.5.8 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote authenticated users to gain privileges via an external reference in a Swagger document.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Websphere Application Server | 8.5.5.8 |
Related Weaknesses (CWE)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI62450
- http://www-01.ibm.com/support/docview.wss?uid=swg21984502Vendor Advisory
- http://www.securityfocus.com/bid/91517
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI62450
- http://www-01.ibm.com/support/docview.wss?uid=swg21984502Vendor Advisory
- http://www.securityfocus.com/bid/91517
FAQ
What is CVE-2016-2945?
CVE-2016-2945 is a vulnerability with a CVSS score of 7.5 (HIGH). The API Discovery implementation in IBM WebSphere Application Server (WAS) 8.5.5.8 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote authenticated users to gain privileges via an ...
How severe is CVE-2016-2945?
CVE-2016-2945 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-2945?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Websphere Application Server.