« Volver al listado

CVE-2016-0275

Estado: ModificadaBaja (3.3)—

IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (FTM) for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013 allows local users to obtain sensitive information via vectors related to cacheable HTTPS responses.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Financial Transaction Manager

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2016-0275",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 3.3,
          "attackVector": "LOCAL",
          "baseSeverity": "LOW",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2018-03-09T19:29:00.490",
  "references": [
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21977245",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21977245",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (FTM) for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013 allows local users to obtain sensitive information via vectors related to cacheable HTTPS responses."
    },
    {
      "lang": "es",
      "value": "IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 y versiones 3.0.0.x anteriores a fp0013; Financial Transaction Manager (FTM) for Check Services for Multi-Platform 2.1.1.2 y versiones 3.0.0.x anteriores a fp0013 y Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform 2.1.1.2 y versiones 3.0.0.x anteriores a fp0013 permiten que usuarios locales obtengan información sensible mediante vectores relacionados con respuestas HTTPS cacheables."
    }
  ],
  "lastModified": "2026-06-17T00:37:14.190",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:financial_transaction_manager:*:*:*:*:*:ach_services:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A2923628-2892-4FB2-AEFF-C7514692032E",
              "versionEndIncluding": "3.0.0.12",
              "versionStartIncluding": "3.0.0.0"
            },
            {
              "criteria": "cpe:2.3:a:ibm:financial_transaction_manager:*:*:*:*:*:check_services:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F0294452-0F17-4AD5-A95E-DFBDB64D9035",
              "versionEndIncluding": "3.0.0.12",
              "versionStartIncluding": "3.0.0.0"
            },
            {
              "criteria": "cpe:2.3:a:ibm:financial_transaction_manager:*:*:*:*:*:cps_services:*:*",
              "vulnerable": true,
              "matchCriteriaId": "32AFC0A0-47B9-409C-98B0-99959CF0FDB3",
              "versionEndIncluding": "3.0.0.12",
              "versionStartIncluding": "3.0.0.0"
            },
            {
              "criteria": "cpe:2.3:a:ibm:financial_transaction_manager:2.1.1.2:*:*:*:*:ach_services:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4A297162-CA5F-4134-8764-16268B8D5A34"
            },
            {
              "criteria": "cpe:2.3:a:ibm:financial_transaction_manager:2.1.1.2:*:*:*:*:check_services:*:*",
              "vulnerable": true,
              "matchCriteriaId": "226FE385-1716-41D3-A864-F175C4E91EDF"
            },
            {
              "criteria": "cpe:2.3:a:ibm:financial_transaction_manager:2.1.1.2:*:*:*:*:cps_services:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1B351EA0-D1C4-4160-94D2-0E764AEFEA2F"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}