Vulnerabilities > Information Exposure

DATE CVE VULNERABILITY TITLE RISK
2017-02-09 CVE-2016-9244 Information Exposure vulnerability in F5 products
A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninitialized memory.
network
low complexity
f5 CWE-200
7.5
2017-02-08 CVE-2016-5918 Information Exposure vulnerability in IBM Tivoli Storage Manager for Space Management
IBM Tivoli Storage Manager HSM for Windows displays the encrypted Tivoli Storage Manager password in application trace output if the password access option is prompt and the password is changed.
local
high complexity
ibm CWE-200
4.7
2017-02-08 CVE-2016-5900 Information Exposure vulnerability in IBM Tealeaf Customer Experience on Cloud Network Capture Add-On 16.1.01
IBM Tealeaf Customer Experience on Cloud Network Capture Add-On could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the TLS certificate.
network
high complexity
ibm CWE-200
5.9
2017-02-08 CVE-2016-0307 Information Exposure vulnerability in IBM Connections
IBM Connections 5.5 and earlier allows remote attackers to obtain sensitive information by reading stack traces in returned responses.
network
low complexity
ibm CWE-200
4.3
2017-02-08 CVE-2016-0210 Information Exposure vulnerability in IBM Sterling B2B Integrator 5.1/5.2
IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information.
network
low complexity
ibm CWE-200
5.3
2017-02-08 CVE-2016-0203 Information Exposure vulnerability in IBM Cloud Orchestrator and Smartcloud Orchestrator
A vulnerability has been identified in the IBM Cloud Orchestrator task API.
local
low complexity
ibm CWE-200
5.5
2017-02-08 CVE-2016-0202 Information Exposure vulnerability in IBM Cloud Orchestrator
A vulnerability has been identified in tasks, backend object generated for handling any action performed by the application in IBM Cloud Orchestrator.
local
low complexity
ibm CWE-200
3.3
2017-02-08 CVE-2015-7493 Information Exposure vulnerability in IBM Infosphere Information Server
IBM InfoSphere Information Server could allow a local user under special circumstances to execute commands during installation processes that could expose sensitive information.
local
high complexity
ibm CWE-200
4.7
2017-02-08 CVE-2015-7418 Information Exposure vulnerability in IBM Websphere Extreme Scale
IBM WebSphere eXtreme Scale and the WebSphere DataPower XC10 Appliance allow some sensitive data to linger in memory instead of being overwritten which could allow a local user with administrator privileges to obtain sensitive information.
local
low complexity
ibm CWE-200
4.4
2017-02-08 CVE-2016-9748 Information Exposure vulnerability in IBM products
IBM Rational DOORS Next Generation 5.0 and 6.0 discloses sensitive information in error response messages that could be used for further attacks against the system.
network
low complexity
ibm CWE-200
4.3