Description

The GIT Integration component in IBM Rational Team Concert (RTC) 5.x before 5.0.2 iFix14 and 6.x before 6.0.1 iFix5 and Rational Collaborative Lifecycle Management 5.x before 5.0.2 iFix14 and 6.x before 6.0.1 iFix5 allows remote authenticated users to obtain sensitive information via a malformed request.

Remediation

References

CVE-2016-2865

Related Vulnerabilities

WordPress Plugin Default Thumbnail Plus Arbitrary File Upload (1.0.2.3)

MySQL CVE-2012-1705 Vulnerability (CVE-2012-1705)

MySQL CVE-2017-10296 Vulnerability (CVE-2017-10296)

phpList Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-12639)

Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-17825)

Severity

Medium

Classification

CVE-2016-2865 CWE-200 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities