CVE-2016-0342 IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote authenticated users to read or modify arbitrary reports by leveraging an incorrect grant o...
MediumCVSS 5.4
EPSS 0.66%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote authenticated users to read or modify arbitrary reports by leveraging an incorrect grant of access. IBM X-Force ID: 111783.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm tririga application platform | >= 3.3.0.0, < 3.3.2.6 | 3.3.2.6 |
| ibm tririga application platform | >= 3.4.0.0, < 3.4.2.3 | 3.4.2.3 |
| ibm tririga application platform | = 3.5.0.0 | No fix listed |
References
- www-01.ibm.com vendor-advisory
- ibm-tririga-cve20160342-info-disc(111783) vdb-entry vendor-advisory